Vulnerabilities

TI-2010-04575 CVE-2010-4852 · GHSA-p46g-2mcx-34rq

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01519 Published 2011-09-27 No fix listed CWE-79

TI-2010-04574 CVE-2010-4851 · GHSA-9fj8-q94p-vwc3

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute…

LOW 37

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the (1) ref or (2) poll_id parameter to index.php, or the (3) country parameter to create_account.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02326 Published 2011-09-27 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote…

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute…