CVE-2010-4504

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

CVE-2010-4504

CVE-2010-4504 affects eSyndiCat Directory 2.3. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the title parameter in two scripts, suggest-category.php and suggest-listing.php. Remote attackers could inject arbitrary web script or HTML as described in the CVE. The connected...

PT-2010-5508

Name of the Vulnerable Software and Affected Versions eSyndiCat Directory version 2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the title parameter to API endpoints such as "suggest-category.php" and "suggest-listing.php"...

CVE-2010-4504: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...