Vulnerabilities

TI-2010-05012 CVE-2010-5315 · GHSA-qr26-w5vf-jf8x

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveC…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0106 Published 2015-01-03 No fix listed CWE-352

TI-2010-05011 CVE-2010-5314 · GHSA-ggrp-rq9v-f8mr

Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita…

LOW 22

Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00966 Published 2015-01-03 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow…

Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita…