CVE-2010-4932

CVE-2010-4932 describes a reflected XSS in Entrans prior to 0.3.3, affecting the file search.php via the query parameter. The root cause is insufficient input sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript executed in the victim’s browser. The linked advisories provid...

CVE-2010-4935

CVE-2010-4935 is a SQL injection vulnerability in poll.php of Entrans 0.3.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the sid parameter. Documents provide the affected application and vulnerable parameter but do not specify a patch version or remediation....