CVE-2023-5695 CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...

Code injection

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body...

CVE-2023-42508 JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body...

CVE-2023-42508 JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body...

CVE-2023-42508

CVE-2023-42508 : JFrog Artifactory versions prior to 7.66.0 are affected by an endpoint abuse vulnerability that allows unauthenticated users to send emails with manipulated email bodies via a crafted payload. Root cause described as improper header input validation leading to email manipulation....

JFrog Artifactory Input Validation Error Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries, and provides an end-to-end solution for automating the tracking of artifacts from development to production. A security...

CVE-2013-10028

A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function stylenewsletter of the file lettreinfo.php. The manipulation of the argument email leads to cross site scripting. The attack may be launched remotely. The...

FreeBSD : phpmyfaq -- multiple vulnerabilities (bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0 advisory. - phpmyfaq developers report: XSS email address manipulation bb528d7c-e2c6-11ed-a3e6-589cfc0f81b0 Note...

Control iD iDSecure SQL注入漏洞

Control iD iDSecure is an ID security program from Control iD. An SQL injection vulnerability exists in Control iD iDSecure version 23.3.19.0, which stems from a problem with the file /v2/customerdb/operator.svc/a, where manipulation of email can result in sql injection...

Email Address Manipulation Vulnerability

Description During testing of phpmyfaq, it was discovered that the application does not properly validate email addresses when updating user profiles. This vulnerability allows an attacker to manipulate their email address and change it to another email address that is already registered in the...

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com' AND SELECT 9110 FR...

Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forgetpassword.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The...

CVE-2023-0516

SourceCodester Online Tours & Travels Management System 1.0 is affected in the Parameter Handler’s file user/forget_password.php, where the email argument manipulation triggers SQL injection. Exploit has been disclosed. Remediation/workaround from connected docs includes disabling the email param...

PT-2022-25149 · Unknown · Monikabrzica Scm

Name of the Vulnerable Software and Affected Versions: MonikaBrzica scm affected versions not specified Description: A critical issue has been found in MonikaBrzica scm, affecting some unknown functionality of the file upis u bazu.php. The manipulation of the email, lozinka, ime, or id arguments...

Updated trojita packages fix security vulnerability

An attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If...

in emoncms/emoncms

✍️ Description In CSRF attack if attacker able to change the victim email then attacker can change email to own email and get password from password reset section and then the account take over happen here. 🕵️‍♂️ Proof of Concept 1.you login in your account 2.you make a file contain the following...

Indico Tampering with links (e.g. password reset) in sent emails

Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's URL generation logic which could have allowed an attacker to make Indico send a password reset link with a valid token pointing to an attacker-controlled domain by sending that domain in the Host header. Ha...

Design/Logic Flaw

The wemailconsumerservice from the built-in application wemail in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This...

Khan Academy: Information can be changed without a password

If a user has access to a logged in session on Khan Academy, they are able to conduct a full account takeover. This is due to the fact that a new email address can be added to an account without a method of re-authentication. Once this email address has been added, the attacker can simply logout...

CVE-2018-18509

A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with...