CVE-2007-3811

CVE-2007-3811 affects the eSyndiCat application, exposing multiple SQL injection flaws in news.php (via the id parameter) and page.php (via the name parameter). The underlying issue is improper handling of user-supplied input, allowing remote attackers to craft SQL payloads that could be executed...

ESyndiCat Link Directory SQL注入漏洞

ESyndiCat Link Directory是一款基于PHP的WEB应用程序。 ESyndiCat Link Directory不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 eSyndiCat 1.6 目前没有解决方案提供： http://www.esyndicat.com/product.html...

CVE-2007-3811: Undefined Security Weakness

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php or 2 the name parameter to page.php...

CVE-2007-3811

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php or 2 the name parameter to page.php...

eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities

No description provided by source. eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat Directory Software - Multiple SQL Injections eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected]...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== eSyndiCat Directory Software Multiple SQL Injection Vulnerabilities =================================================================== eSyndiCat: Multiple SQL Injection's...

esyndicat-sql.txt

eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

Design/Logic Flaw

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...

CVE-2007-2785

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...

CVE-2007-2785

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...

CVE-2007-2785

CVE-2007-2785 concerns manage-admins.php in eSyndiCat Pro 1.x. The vulnerability allows remote attackers to create additional administrative accounts by modifying parameters such as username, new_pass, new_pass2, status, and super in an add action. This implies unauthenticated remote write access...

CVE-2007-2785: Undefined Security Weakness

manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...

eSyndiCat Input Validation Error Vulnerability

eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-4923

The CVE-2006-4923 vulnerability affects the eSyndiCat Portal System, specifically the search.php component, where the what parameter can be exploited to inject arbitrary script/HTML (XSS). The issue is described as a cross-site scripting vulnerability enabling remote code/script insertion. The cu...

CVE-2006-4923: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

[SA21979] eSyndiCat Directory Software "what" Cross-Site Scripting

TITLE: eSyndiCat Directory Software "what" Cross-Site Scripting SECUNIA ADVISORY ID: SA21979 VERIFY ADVISORY: http://secunia.com/advisories/21979/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: eSyndiCat Directory Software 1.x http://secunia.com/product/10166/...