RSS   Vulnerabilities for 'Bedita'   RSS

2015-01-03
 
CVE-2010-5315

CWE-352
 

 
Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.

 
 
CVE-2010-5314

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index.

 


Copyright 2024, cxsecurity.com

 

Back to Top