Vulnerabilities

TI-2010-04473 CVE-2010-4750 · GHSA-4m2p-3mq4-6fxc

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS…

LOW 32

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01021 Published 2011-03-01 No fix listed CWE-352

TI-2010-04472 CVE-2010-4749 · GHSA-j586-wg76-c652

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02016 Published 2011-03-01 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS…

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly…