CVE-2010-4922

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.17%

Published

Oct 9, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAllinta CMS 22.07.2010 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp.

Weaknesses (CWE)

CWE-89

Affected Products (1)

allinta · allinta_cmsvulnerable

References (12)

http://securityreason.com/securityalert/8453

http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms.html

Exploit

http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms_1.html

Exploit

http://www.securityfocus.com/archive/1/512958

Exploit

http://www.securityfocus.com/archive/1/512959/100/0/threaded

http://www.securityfocus.com/bid/42320

Exploit

http://securityreason.com/securityalert/8453

http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms.html

Exploit

http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms_1.html

Exploit

http://www.securityfocus.com/archive/1/512958

Exploit

http://www.securityfocus.com/archive/1/512959/100/0/threaded

http://www.securityfocus.com/bid/42320

Exploit

KEV Catalog EPSS Scores Vendors All CVEs