CVE-2010-4916: Coldgen Coldusergroup

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

Affected products

• Coldgen Coldusergroup: version 1.06 only

Published 2011-10-08. Last modified 2026-06-16.