CVE-2010-5315

BEdita < 3.0.1.2550 "betula" - Cross-Site Request Forgery via News Categories or Admin User Save

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-5315. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The exploit demonstrates CSRF and XSS vulnerabilities in BEdita 3.0.1.2550. It includes PoC forms for CSRF-based user modification and XSS via unsanitized input in 'data[label]' and 'searchstring' parameters.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser.

Exploits (1)

exploitdb WORKING POC
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/15742

The exploit demonstrates CSRF and XSS vulnerabilities in BEdita 3.0.1.2550. It includes PoC forms for CSRF-based user modification and XSS via unsanitized input in 'data[label]' and 'searchstring' parameters.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: BEdita 3.0.1.2550
No auth needed
Prerequisites: Victim must visit a malicious page or be tricked into submitting a crafted form
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

EPSS 0.0106
EPSS Percentile 60.1%

Details

CWE
CWE-352
Status published
Products (1)
chialab_\&_channelweb/bedita < 3.0.1.2550_\"betula\"
Published Jan 03, 2015
Tracked Since Feb 18, 2026