CVE-2010-4749

CVE-2010-4749 concerns BLOG:CMS 4.2.1.e (and possibly earlier) with multiple XSS flaws caused by improper input sanitization. The root causes are (1) the body parameter in action.php and (2) the amount and (3) the action parameters in admin/index.php, allowing remote attackers to inject arbitrary...

CVE-2010-4750

CVE-2010-4750 describes a CSRF vulnerability in BLOG:CMS (admin/libs/ADMIN.php) that allows a logged-in administrator’s credentials to be hijacked via forged requests, potentially enabling credential changes. The related HTB advisory expands this to CSRF alongside XSS/Script-insertion issues in B...