CVE-2010-4611

Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to 1 pages.php and 2 menu.php in includes/corefiles and 3 extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message...

CVE-2010-4610

Affected software: Html-edit CMS 3.1.8. Vulnerability: Cross-site scripting (XSS) via the error parameter in index.php. Root cause: Input sanitation/error handling flaw in index.php leading to script/HTML injection. Impact: Remote attackers can inject arbitrary web script or HTML into a victim’s ...