Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

syndeocms syndeocms vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-1979
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and previous versions allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.
Syndeocms Syndeocms 2.8.00Syndeocms Syndeocms 2.7.00Syndeocms Syndeocms 2.9.00Syndeocms Syndeocms 2.8.1Syndeocms Syndeocms 2.8.02Syndeocms Syndeocms 2.4Syndeocms Syndeocms 2.6.00Syndeocms Syndeocms 2.5.01Syndeocms SyndeocmsSyndeocms Syndeocms 3.0.00Syndeocms Syndeocms 2.5.00Syndeocms Syndeocms 2.4.10
NA
CVE-2012-1203
Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that add user accounts via a save_user action.
Syndeocms Syndeocms
NA
CVE-2008-5271
Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote malicious users to inject arbitrary web script or HTML via the section parameter.
Syndeocms Syndeocms 2.6.0
NA
CVE-2008-5272
Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, re...
Syndeocms Syndeocms 2.6.0
NA
CVE-2007-5840
PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote malicious users to execute arbitrary PHP code via a URL in the cmsdir parameter, a different vector than CVE-2006-4920.2.
Syndeocms Syndeocms 2.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook