Дырка в Subscribe Me

Любой желающий может удалить адрес из списка рассылки...

Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below.

note : This is not apparent in the commercial versions, tested on three different versions the author was notified and appropriate changes have since been made. product page - http://www.cgiscriptcenter.com/subscribe/index2.html vendor notice - Security Advisory: Users of Subscribe Me Lite 1.0 -...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...

CVE-2000-0688

CVE-2000-0688 concerns Subscribe Me LITE. The vulnerability is that it does not properly authenticate password-change attempts, allowing a remote attacker to gain privileges for the Account Manager by directly invoking subscribe.pl with the setpwd parameter. The available connected documents conf...

Subscribe Me Vulnerability

Product: Subscribe Me Versions: ALL version numbers LITE only OS: Unix and Winnt Vendor: Notified, http://www.cgiscriptcenter.com/ The Problem: Yet again the script allows a remote user to overwrite the Admin Passwd file with any password they see fit. Therefore giving them Admin access to the...

Дырки в Subscribe Me/Account Manager

Непривелегированный пользователь может поменять пароль администратора...

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (2)

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration 2 source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full...

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (1)

source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition or removal of users from mailing...