Vulnerabilities

TI-2011-04454 CVE-2011-5177 · GHSA-rmmm-6vv2-783p

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) art…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01613 Published 2012-09-20 No fix listed CWE-79

TI-2008-03160 CVE-2008-3299 · GHSA-v339-8wjf-rjvc

eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative…

MEDIUM 42

eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng cookie value to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06251 Published 2008-07-25 No fix listed CWE-287

TI-2007-06240 CVE-2007-6543 · GHSA-v668-wf3p-5w6m

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows…

LOW 35

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01037 Published 2007-12-28 No fix listed CWE-89

TI-2007-03695 CVE-2007-3811 · GHSA-88c5-h2gm-6wp3

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01195 Published 2007-07-17 No fix listed

TI-2007-02696 CVE-2007-2785 · GHSA-m8v5-w6hc-47fv

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional…

LOW 32

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, super, and certain other…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0116 Published 2007-05-21 No fix listed

TI-2006-02509 CVE-2006-2578 · GHSA-c8qr-94hh-x9q6

admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and…

LOW 26

admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminat…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01324 Published 2006-05-24 No fix listed