CVE-2010-2675

CVE-2010-2675 affects TSOKA:CMS versions 1.1, 1.9, and 2.0, with a cross-site scripting (XSS) flaw in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the id parameter in an articolo action. The provided connected documents do not specify a root caus...

CVE-2010-2674

The CVE-2010-2674 entry affects TSOKA:CMS versions 1.1, 1.9, and 2.0, where a flaw in index.php allows SQL injection via the id parameter in the articolo action. The underlying cause is improper handling of user-supplied input leading to arbitrary SQL execution on remote systems. Impact is descri...