Filtered by vendor Chialab \& Channelweb
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2010-5314 | 1 Chialab \& Channelweb | 1 Bedita | 2024-09-16 | N/A |
| Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index. | ||||
| CVE-2010-5315 | 1 Chialab \& Channelweb | 1 Bedita | 2024-09-16 | N/A |
| Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser. | ||||
Page 1 of 1.