Lucene search
+L

47 matches found

Patchstack
Patchstack
added 2015/11/24 12:0 a.m.6 views

WordPress Email Newsletter Plugin <= 20.13.6 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "search". Solution Update the plugin...

1.9AI score
SaveExploits0References1Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/06/09 5:2 a.m.8 views

MilkyStep vulnerable to OS command injection

Overview MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep contains an OS command injection vulnerability CWE-78. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

7.5CVSS7.4AI score0.01615EPSS
SaveExploits0References6
0day.today
0day.today
added 2015/01/05 12:0 a.m.25 views

Wordpress Email newsletter 20.9 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Email newsletter 20.9 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/email-newsletter/ Software Link :...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2012/06/07 12:0 a.m.9 views

WordPress Email Newsletter Plugin 8.0 - Information Disclosure Vulnerability

WordPress Email Newsletter plugin is prone to an information disclosure vulnerability. It allows an attacker to obtain sensitive information that may aid in further attacks. Solution Update the plugin...

2.4AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2012/06/07 12:0 a.m.11 views

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/06/07 12:0 a.m.25 views

WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure

source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/06/06 12:0 a.m.29 views

WordPress Email Newsletter 8.0 Information Disclosure

Description : Wordpress Plugins - Email Newsletter Information Disclosure Vulnerability Version : 8.0 Link : http://wordpress.org/extend/plugins/email-newsletter/ Plugins : http://downloads.wordpress.org/plugin/email-newsletter.zip Date : 28-05-2012 Google Dork :...

7AI score
SaveExploits0
Rows per page
Query Builder