CVE-2010-4610

Affected software: Html-edit CMS 3.1.8. Vulnerability: Cross-site scripting (XSS) via the error parameter in index.php. Root cause: Input sanitation/error handling flaw in index.php leading to script/HTML injection. Impact: Remote attackers can inject arbitrary web script or HTML into a victim’s ...

CVE-2010-4609

CVE-2010-4609 affects Html-edit CMS 3.1.8, with an SQL injection in index.php via the nuser parameter in the registrate action. The vulnerability allows remote attackers to execute arbitrary SQL commands, potentially reading or modifying database contents. The available connected documents confir...

CVE-2010-4611

Html-edit CMS 3.1.8 is affected by an information-disclosure path disclosure vulnerability (CVE-2010-4611). A remote attacker can obtain the installation path by directly requesting specific scripts: includes/core_files/pages.php, includes/core_files/menu.php, and extensions/login/frontend/pages/...