CVE-2007-3811

Published: Jul 17, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php.

Affected (1)

Products: Esyndicat: Esyndicat Directory

Esyndicat

1 product

Esyndicat Directory

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Esyndicat Esyndicat Directory	Version 1.6

References (12)

http://osvdb.org/36266

Source: cve@mitre.org

http://osvdb.org/36267

Source: cve@mitre.org

http://www.securityfocus.com/bid/24908

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/2543

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35427

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4183

Source: cve@mitre.org

http://osvdb.org/36266