Vulnerabilities

TI-2011-04454 CVE-2011-5177 · GHSA-rmmm-6vv2-783p

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) art…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01613 Published 2012-09-20 No fix listed CWE-79

TI-2007-02696 CVE-2007-2785 · GHSA-m8v5-w6hc-47fv

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional…

LOW 32

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, super, and certain other…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0116 Published 2007-05-21 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat…

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional…