Bedita cross-site scripting vulnerability (CNVD-2015-05900)

BEdita is a framework for creating semantic rule-based PHP applications and content management systems developed by Chialab and ChannelWeb in Italy. A cross-site scripting vulnerability exists in Bedita 3.5.1 and earlier versions, which stems from the index.php/admin/saveConfig URI failing to...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

PT-2015-7365

Name of the Vulnerable Software and Affected Versions BEdita versions prior to 3.6.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the cfgprojectName parameter to "index.php/admin/saveConfig", the datastats provider url parameter to...