CVE-2010-4916
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote...
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
- Record
CVE-2010-4916- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
- Record
CVE-2010-4916- Updated
- 2026-11-02
EUVDEUVD-2010-4880 No score
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
- Record
EUVD-2010-4880- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2wc-cvm7-46rm No score
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote...
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
- Record
GHSA-h2wc-cvm7-46rm- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ColdUserGroup 1.06 - Blind SQL Injection | 2010-09-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4916 is a high vulnerability (CVSS 7.5) in Coldgen Coldusergroup, published October 8, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. No source names a fixed version.
References
secunia.com/advisories/41335
securityreason.com/securityalert/8448
securityfocus.com/bid/43035
exchange.xforce.ibmcloud.com/vulnerabilities/61638
exploit-db.com/exploits/14935
packetstormsecurity.org/1009-exploits/coldusergroup-sql.txt
nvd.nist.gov/vuln/detail/CVE-2010-4916
github.com/advisories/GHSA-h2wc-cvm7-46rm