Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Esyndicat Subscribe
Filtered by product Esyndicat Pro
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2785 1 Esyndicat 1 Esyndicat Pro 2018-10-16 6.8 MEDIUM N/A
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, super, and certain other parameters in an add action.
CVE-2011-5177 1 Esyndicat 1 Esyndicat Pro 2017-08-28 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) articles, or (4) suggest-category; or (5) sort parameter to the search page.