CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

CVE-2017-5930: Missing Authorization

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

PT-2017-16766

Name of the Vulnerable Software and Affected Versions PostfixAdmin versions prior to 3.0.2 Description The issue concerns a missing permission check in the AliasHandler component, allowing remote authenticated domain admins to delete protected aliases. This can be achieved by manipulating the...

MetInfo 5.3.15 Cross Site Scripting

PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS PSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPSPS CVE-2017-6878:MetInfo5.3.15 Stored Cross Site Scripting Application: MetInfo Versions Affected: 5.3.15 Vendor URL: http://www.metinfo.cn/...

PT-2017-17169

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/campaign-delete.php file, specifically the id GET parameter. Recommendations...

CVE-2017-6576: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2014-9407: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Revive Adserver before 3.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 delete data via a request to agency-delete.php, 2 tracker-delete.php, or 3 userlog-delete.php in admin/ or 4 unlink...

PT-2014-8995

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.0.5 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities. T...

Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit

No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...

TextAds delete.php id Parameter XSS

No description provided by source...

CVE-2013-5984

Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. dot dot in the file parameter...

CVE-2013-5984: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. dot dot in the file parameter...

PT-2014-3011

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 0.830 Description The issue allows remote attackers to delete arbitrary files by exploiting a directory traversal vulnerability. This is achieved by using a .. dot dot in the file parameter of the vulnerable...

CVE-2013-5954: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete 1 users via admin/agency-user-unlink.php, 2 advertisers via admin/advertiser-delete.php, 3 banners via...

PT-2014-3006

Name of the Vulnerable Software and Affected Versions OpenX versions 2.8.11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that delete various components, including users, advertisers, banners, campaigns, channels, affiliate...

CVE-2012-2246: Improper Input Validation

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...

PT-2012-3904

Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote attackers to conduct clickjacking attacks, enabling them to delete arbitrary users and bypass CSRF protection via the...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

PT-2012-5001

Name of the Vulnerable Software and Affected Versions Simple Web Content Management System version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints, including "item delete.php", "item status.php...