Dadabik

dadabik

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Dadabik

dadabik

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-4364 1Dadabik 1Dadabik Apr 29, 2026 Dec 1, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting...Show more DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields. NOTE: some of these details are obtained from third party information.Show less
CVE-2010-4355 1Dadabik 1Dadabik Apr 29, 2026 Dec 1, 2010 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2010-4364

1Dadabik

Apr 29, 2026

Dec 1, 2010

N/A· v4

N/A· v3

4.3 MEDIUM· v2

DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields. NOTE: some of these details are obtained from third party information.Show less

CVE-2010-4355

1Dadabik

Apr 29, 2026

Dec 1, 2010

N/A· v4

N/A· v3

3.5 LOW· v2

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.