CVE-2010-5318

CVE-2010-5318 affects SweetRice CMS prior to version 0.6.7.1. The vulnerability resides in the password-reset feature of as/index.php, where remote attackers can modify the administrator password by supplying the administrator’s email address in the email parameter. No exploit details are provide...

CVE-2010-5316

CVE-2010-5316 refers to a cross-site scripting (XSS) vulnerability in SweetRice CMS, affecting versions before 0.6.7.1. The issue lies in as/index.php, where an attacker can inject arbitrary web script or HTML via a top_height cookie. The connected records confirm the vulnerability vector and aff...