Vulnerabilities > Entrylevelcms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-03-23 | CVE-2010-1076 | Cross-Site Scripting vulnerability in Entrylevelcms EL CMS Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. | 4.3 |
| 2010-03-23 | CVE-2010-1075 | SQL Injection vulnerability in Entrylevelcms EL CMS SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL commands via the subj parameter. | 7.5 |