Vulnerabilities

TI-2019-11670 CVE-2019-15570 · GHSA-9gv2-2m38-j6cx

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

MEDIUM 45

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01451 Published 2019-08-26 Fixed in 4.0.0 CWE-89

TI-2015-07639 CVE-2015-9260 · GHSA-69gq-9gm7-p5m5

An issue was discovered in BEdita before 3.7.0.

LOW 26

An issue was discovered in BEdita before 3.7.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00984 Published 2018-07-05 No fix listed CWE-79

TI-2015-05710 CVE-2015-6809 · GHSA-4p9p-g6c8-9x7p

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cfg[projectName] parameter to index.php/admin/saveConfig, the (2) data[…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03642 Published 2015-09-04 No fix listed CWE-79

TI-2015-00937 CVE-2015-1040 · GHSA-c5hh-9w58-4367

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile for…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01618 Published 2015-01-15 No fix listed CWE-79

Vulnerabilities

Filters

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

An issue was discovered in BEdita before 3.7.0.

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote…

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in…