Filtered by vendor Chialab \& Channelweb Subscriptions
Filtered by product Bedita Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2010-5314 1 Chialab \& Channelweb 1 Bedita 2024-09-16 N/A
Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index.
CVE-2010-5315 1 Chialab \& Channelweb 1 Bedita 2024-09-16 N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.