WordPress Video Gallery 2.8 Unprotected Mail Page Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Video Gallery 2.8 Unprotected Mail Page Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage :...

Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability

Document Title: =============== Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date: ============= 2015-05-06...

CVE-2011-0018

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

Cross site request forgery (csrf)

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

CVE-2011-0018

CVE-2011-0018 concerns the OpenVAS Manager command injection via the email function in manage_sql.c. Affected are OpenVAS Manager 1.0.x (up to 1.0.3) and 2.0.x (up to 2.0rc2). The root cause is insufficient validation of user-supplied data in OMP requests processed by Greenbone Security Assistant...

CVE-2011-0018

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

PT-2011-2016

Name of the Vulnerable Software and Affected Versions OpenVAS Manager versions 1.0.x through 1.0.3 OpenVAS Manager versions 2.0.x through 2.0rc2 Description The issue allows remote authenticated users to execute arbitrary commands via the To or From e-mail address in an OMP request to the Greenbo...

CVE-2008-3768

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...

Command injection

emailin.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f From address option to the Email::Send::Sendmail function, probably involving shell metacharacters...

nav2000.dos.txt

Hello, I just found somewhat of a problem in Symantec's Email protection in NAV2000. The Protection program leaves a pop server running on the local workstation NAV2000 is installed on.. This server can be crashed somewhat like this telnet 1.1.1.1 USER over 1200 char Then, GPF in windows98 POPROX...