Auth bypass in Esyndicat

CVE-2008-3299

eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: Broken Authentication

EPSS: 0.063 (92.8th percentile) — read the EPSS interpretation.

Affected products

  • Esyndicat — versions 1.6
  • N/a — versions n/a

Weakness classification (CWE)

References