Vulnerabilities (CVE)

Filtered by vendor Cotonti Subscribe
Filtered by product Cotonti Siena
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-44115 1 Cotonti 1 Cotonti Siena 2025-06-13 N/A 5.4 MEDIUM
A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting.
CVE-2013-4789 1 Cotonti 1 Cotonti Siena 2025-04-11 7.5 HIGH N/A
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php.