CVE-2011-5177 in eSyndiCat Pro
Summary
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) articles, or (4) suggest-category; or (5) sort parameter to the search page.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
09/19/2012
Disclosure
09/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62374 | eSyndiCat eSyndiCat Pro cross site scripting | 79 | High | Unavailable | CVE-2011-5177 |