Design/Logic Flaw

2007-05-2123:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

JSON

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, super, and certain other parameters in an add action.

CPENameOperatorVersion
esyndicat_proeq1.0.120

CPE	Name	Operator	Version
	esyndicat_pro	eq	1.0.120

References

osvdb.org/37521

securityreason.com/securityalert/2729

www.securityfocus.com/archive/1/468966/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/34371