CVE-2009-5122: Exposure of Sensitive Information to an Unauthorized Actor

The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3748

Websense Web Administrator in Websense Personal Email Manager 7.1.x before Hotfix 4 and Websense Email Security 7.1 before Hotfix 4 contains multiple cross-site scripting (XSS) flaws. The vulnerabilities affect the Web Administrator component and allow remote attackers to inject arbitrary script/...

NSOADV-2009-003: Websense Email Security Cross Site Scripting

Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

Websense Email Security和Email Manager 'STEMWADM.EXE'远程拒绝服务漏洞

Bugraq ID: 36740 Websense Email Security software是一款内容安全智能保护解决方案，可对Email进行安全保护。Websense Email Security Web管理是一个WEB前端，用于访问消息管理，目录管理和查看日志。 Web管理全段STEMWADM.EXE默认监听8181端口，如果攻击者发送HTTP请求给8181端口并不等待服务器的应答，WEB服务将崩溃。 发送"GET /index.asp请求并关闭套接字，服务程序将不会应答任何请求并崩溃。 Websense Email Security 7.1 Websense Email...

Websense Email Security xss

No description provided by source. Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de UR...

Sql injection

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3209

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3209

CVE-2009-3209 is a SQL injection in remove.php of PHP eMail Manager 3.3.0, exploitable via the ID parameter to execute arbitrary SQL commands. Documented by NVD with a CVSS v2 base score of 7.5 (HIGH) and network access with no authentication. Connected documents do not provide a patch or remedia...

CVE-2009-3209

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

PHP Email Manager SQL Injection

===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html Dork:-PHPEmailManager Found by :- MuShTaQ from :-...

PHP Email Manager - 'remove.php?ID' SQL Injection

===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html Dork:-PHPEmailManager Found by :- MuShTaQ from :-...

PHP Email Manager (remove.php ID) SQL Injection Vulnerability

No description provided by source. ===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Remote SQL Injection Vulnerability...

PHP Email Manager (remove.php ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHP Email Manager remove.php ID SQL Injection Vulnerability ============================================================= ===========================================|- Mtrb3 hen...

PHP Email Manager - remove.php?ID SQL Injection

PHP Email Manager - remove.php?ID SQL Injection ===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html...

Online Email Manager Insecure Cookie Handling Vulnerability

No description provided by source. Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...

Online Email Manager Insecure Cookie

Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.php DorK : Powered by Online Email Manager exploit: javascript:document.cookie = "auth=admin; path=/";...

Online Email Manager - Insecure Cookie Handling

Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit: javascript:document.cookie = "auth=admin; path=/";...

Online Email Manager - Insecure Cookie Handling

Online Email Manager - Insecure Cookie Handling Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...