CVE-2011-5177

CVE-2011-5177 affects the eSyndiCat Pro 2.3.05 web app. The vulnerability is multiple cross-site scripting (XSS) in admin/controller.php, exploitable via the following parameters: (1) id to the admins, (2) blocks, (3) articles, (4) suggest-category, or (5) sort on the search page. The root cause ...