Vulnerabilities

TI-2010-04097 CVE-2010-4364 · GHSA-555p-vhfv-8grv

DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the…

LOW 22

DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01099 Published 2010-12-01 No fix listed CWE-79

TI-2010-04088 CVE-2010-4355 · GHSA-5j8g-v93x-4959

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or…

LOW 18

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00842 Published 2010-12-01 No fix listed CWE-79

Vulnerabilities

Filters

DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the…

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or…