CVE-2010-1076

The CVE-2010-1076 entry concerns an XSS in Entry Level CMS (EL CMS): index.php allows remote injection of arbitrary script/HTML via the subj parameter when handling a forced SQL error message. This is documented across multiple sources (NVD, Red Hat, CVE list, etc.). Details specify the vulnerabl...

CVE-2010-1075

CVE-2010-1075 is an SQL injection vulnerability in the EL CMS (Entry Level CMS) where the vulnerable component is index.php . The issue allows remote attackers to execute arbitrary SQL commands through the subj parameter. The available documents do not specify the exact root cause in code, affect...