4 matches found
CVE-2025-10082
CVE-2025-10082 affects SourceCodester Online Polling System 1.0. The vulnerability resides in /admin/manage-admins.php, where manipulation of the email parameter leads to SQL injection. Exploitation can be performed remotely and public disclosures exist. Multiple connected sources confirm the iss...
Design/Logic Flaw
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...
CVE-2007-2785
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, newpass, newpass2, status, super, and certain other parameters in an add action...
CVE-2007-2785
CVE-2007-2785 concerns manage-admins.php in eSyndiCat Pro 1.x. The vulnerability allows remote attackers to create additional administrative accounts by modifying parameters such as username, new_pass, new_pass2, status, and super in an add action. This implies unauthenticated remote write access...