Description

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2010-4641

Related Vulnerabilities

Python Incorrect Type Conversion or Cast Vulnerability (CVE-2020-10735)

WordPress Plugin Simple Admin Language Change Security Bypass (2.0.1)

WebLogic CVE-2020-14589 Vulnerability (CVE-2020-14589)

Joomla CVE-2019-12764 Vulnerability (CVE-2019-12764)

WebLogic CVE-2021-2109 Vulnerability (CVE-2021-2109)

Severity

High

Classification

CVE-2010-4641 CWE-138

Tags

Missing Update Known Vulnerabilities