CVE-2010-2014

CVE-2010-2014 affects LiSK CMS 4.4. Concrete details in connected sources show a cross-site scripting (XSS) vulnerability in cp/list_content.php, exploitable via the cl parameter and potentially the id parameter, due to input sanitation errors. The issue is documented across multiple references (...

CVE-2010-2015

LiSK CMS 4.4 is affected by SQL injection vulnerabilities (CVE-2010-2015) in two server-side scripts: cp_messages.php (view_inbox via id) and edit_email.php (via id). The root cause is inadequate input sanitization of the id parameter, enabling remote attackers with CP Messages privileges to craf...

CVE-2010-2013

CVE-2010-2013 concerns a cross-site scripting (XSS) vulnerability in LiSK CMS 4.4, exploitable through the id parameter in cp/edit_email.php. The root cause is improper input sanitization of user-supplied data, allowing remote attackers to inject arbitrary HTML/Script that executes in a victim’s ...