CVEvulnerability
CVE-2007-3811
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php.
Affected configurations
• esyndicat esyndicat directory 1.6
References
- http://osvdb.org/36266 osvdb.org
- http://osvdb.org/36267 osvdb.org
- http://www.securityfocus.com/bid/24908 Exploit
- http://www.vupen.com/english/advisories/2007/2543 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35427 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4183 www.exploit-db.com
- http://osvdb.org/36266 osvdb.org
- http://osvdb.org/36267 osvdb.org
- http://www.securityfocus.com/bid/24908 Exploit
- http://www.vupen.com/english/advisories/2007/2543 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35427 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4183 www.exploit-db.com