← Back

Siestta

siestta

Vendor: Ramoncastro • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-1711
1Ramoncastro
1Siestta
Apr 29, 2026
May 4, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter.
CVE-2010-1710
1Ramoncastro
1Siestta
Apr 29, 2026
May 4, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the idioma parameter.