CVE-2010-5030

CVE-2010-5030 is an XSS vulnerability in Ecomat CMS 5.0, tracked across multiple sources. The flaw resides in index.php’s lang parameter, where inadequate input sanitization allows a remote attacker to inject arbitrary HTML/JavaScript and execute in the victim’s browser. The HTBridge advisory exp...

CVE-2010-5029

CVE-2010-5029 : A SQL injection in the Ecomat CMS 5.0 web action occurs via the show parameter in index.php. The root cause is an input sanitation error in the show parameter, allowing remote attackers to craft HTTP requests and execute arbitrary SQL commands against the application’s database. E...