eSyndiCat Portal System XSS Vuln.

eSyndiCat Portal System has an xss bug in search.php can be exploited from web interface http://www.example.com/path/search.php?what=xss&searchtop.x=0&searchtop.y=0&searchtop=GO -------------------- Discovered by meto5757 Rootshell Security Group...

ESyndiCat 1.5 - search.php Cross-Site Scripting

ESyndiCat 1.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20106/info eSyndiCat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to have arbitrary script code...

ESyndiCat 1.5 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20106/info eSyndiCat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in t...

CVE-2006-2578

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...

Code injection

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...

CVE-2006-2578

CVE-2006-2578 affects eSyndicat Directory 1.2. When register_globals is enabled and magic_quotes_gpc is disabled, a remote attacker can include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter. This is a remote code execution risk...

CVE-2006-2578

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...

CVE-2006-2578: Undefined Security Weakness

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...