CVE-2021-41083

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

EUVD-2005-2596

Malware in sbrugna...

EUVD-2021-28232

Malicious code in bioql PyPI...

Dada Mail Cross-Site Request Forgery Vulnerability

Dada Mail is a web-based email list management system. A cross-site request forgery vulnerability exists in Dada Mail versions prior to 11.16.0. An attacker could send a crafted web page to obtain information about a user's account...

CVE-2021-41083

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

CVE-2021-41083

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

Cross site request forgery (csrf)

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

CVE-2021-41083

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

CVE-2021-41083 CSRF Vulnerability in dada-mail 11.15.1 and below

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

CVE-2021-41083

CVE-2021-41083 is a CSRF vulnerability in Dada Mail prior to version 11.16.0. In affected versions, a user who is logged into the list control panel could be induced to visit a malicious page (via phishing email/SMS, etc.) that allows an attacker to perform actions in the user’s session, includin...

CVE-2021-41083

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

CVE-2021-41083: Cross-Site Request Forgery (CSRF)

Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page via email, SMS, etc, that - when visited, allows them control of the list control panel as if the bad actor was logged in themselves. This includes changing any...

PT-2021-23076

Name of the Vulnerable Software and Affected Versions Dada Mail versions 11.15.1 and below Description A CSRF vulnerability in Dada Mail allows a bad actor to control the list control panel as if they were logged in themselves. This can be achieved by giving the target a carefully crafted web pag...

Dada Mail Cross-Site Request Forgery Vulnerability

Dada Mail is a web-based email list management system. A cross-site request forgery vulnerability exists in Dada Mail versions prior to 11.16.0. An attacker could send a crafted web page to obtain information about a user's account...

Dada Mail < 4.0.2 List Membership Requirement Bypass

Binary data 5294.prm...

CVE-2008-6221

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

CVE-2008-6221

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

CVE-2008-6221

CVE-2008-6221 describes a PHP remote file inclusion in the Dada Mail Manager (com_dadamail) component for Joomla! 2.6. The flaw allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the GLOBALS[mosConfig_absolute_path] parameter. Affected software is Joomla! with the com_...

EUVD-2008-6191

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...