88 matches found
CVE-2008-3299
eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the adminlng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3299
CVE-2008-3299 affects eSyndiCat 1.6, where remote attackers can bypass authentication and gain administrative access by setting the admin_lng cookie value to 1. The underlying cause is a cookie-based auth bypass that grants admin privileges without valid credentials. The provided documents do not...
CVE-2008-3299: Improper Authentication
eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the adminlng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
eSyndiCat 1.6 - 'admin_lng' Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/30332/info eSyndiCat is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gain administrative access to the affecte...
eSyndiCat 1.6 - admin_lng Cookie Authentication Bypass
eSyndiCat 1.6 - adminlng Cookie Authentication Bypass source: https://www.securityfocus.com/bid/30332/info eSyndiCat is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this...
esyndicat-xss.txt
eSyndiCat Directory Software Pro 2.2 XSS - Cross-Site Scripting Vulnerability - Vendor : www.esyndicat.com - Platform : PHP - Discovered : by Fugitif My vulnerability is on "register.php" and works this way : http://www.site.com/register.php where...
eSyndiCat 2.2 - register.php Multiple Cross-Site Scripting Vulnerabilities
eSyndiCat 2.2 - register.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30178/info eSyndiCat is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues t...
eSyndiCat 2.2 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/30178/info eSyndiCat is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...
Sql injection
SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6543
SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
esyndicatles-sql.txt
-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-200...
CVE-2007-6543: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6543
SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6543
The CVE-2007-6543 issue affects the eSyndiCat Link Exchange Script, specifically the suggest-link.php file. The underlying vulnerability is a SQL injection via the id parameter, enabling remote attackers to execute arbitrary SQL commands. This is evidenced by the description in the CVE records, i...
eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability
No description provided by source. -------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability ====================================================================...
eSyndiCat Link Exchange Script 2005-2006 - SQL Injection
eSyndiCat Link Exchange Script 2005-2006 - SQL Injection -------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
eSyndiCat Link Exchange Script 2005-2006 - SQL Injection
-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-20...
Sql injection
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php or 2 the name parameter to page.php...