Syndeocms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1203 Dec 28, 00:59 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP CSRF Syndeocms

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.2%

CVE-2012-1979 Apr 17, 18:55 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Syndeocms

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

0.9%

CVE-2012-1203

EPSS 0% CVSS 6.8

MEDIUM POC This Month

PHP CSRF Syndeocms

NVD Exploit-DB

CVE-2012-1979

EPSS 1% CVSS 3.5

LOW POC Monitor

PHP XSS Syndeocms

NVD Exploit-DB