Vulnerabilities > 4Site > 4Site CMS > 2.0

DATE CVE VULNERABILITY TITLE RISK
2010-11-03 CVE-2010-4152 SQL Injection vulnerability in 4Site CMS 2.0/2.2
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
network
low complexity
4site CWE-89
7.5