6 matches found
CVE-2025-10082
CVE-2025-10082 affects SourceCodester Online Polling System 1.0. The vulnerability resides in /admin/manage-admins.php, where manipulation of the email parameter leads to SQL injection. Exploitation can be performed remotely and public disclosures exist. Multiple connected sources confirm the iss...
CVE-2025-10082: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and m...
Design/Logic Flaw
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...
CVE-2007-2785
CVE-2007-2785 concerns manage-admins.php in eSyndiCat Pro 1.x. The vulnerability allows remote attackers to create additional administrative accounts by modifying parameters such as username, new_pass, new_pass2, status, and super in an add action. This implies unauthenticated remote write access...
CVE-2007-2785
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...
CVE-2007-2785: Undefined Security Weakness
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...