Vulnerabilities > Chialab Channelweb
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2015-01-03 | CVE-2010-5315 | Cross-Site Request Forgery (CSRF) vulnerability in Chialab & Channelweb Bedita Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser. | 6.8 |
2015-01-03 | CVE-2010-5314 | Cross-site Scripting vulnerability in Chialab & Channelweb Bedita Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index. | 4.3 |