CVEvulnerability
CVE-2008-6924
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email, (3) password, (4) password2, (5) security_code, and (6) register parameters.
Affected configurations
• intelliants esyndicat 2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt Exploit
- http://secunia.com/advisories/31041 Vendor Advisory
- http://www.osvdb.org/46908 Exploit
- http://www.securityfocus.com/bid/30178 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43715 exchange.xforce.ibmcloud.com
- http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt Exploit
- http://secunia.com/advisories/31041 Vendor Advisory
- http://www.osvdb.org/46908 Exploit
- http://www.securityfocus.com/bid/30178 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43715 exchange.xforce.ibmcloud.com