DigitalSellz: Own downloading link isn't properly checked in the email template

Thank you for your submission to Digitalsellz Bug program...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

CVE-2007-3773

CVE-2007-3773 involves a CSRF flaw in the Email-Template module of a Generic YouTube Clone Script. The vulnerability enables remote attackers to cause administrators to upload files with arbitrary types to templates/emails/. The documents confirm the affected component (Email-Template module) and...

CVE-2007-3773: Improper Control of Generation of Code

Cross-site request forgery CSRF vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators...

Another You tube clone script vulnerability

ChX Security | Advisory 2 | ============= - "Generic YouTube Clone Script - XSRF: Arbitrary Code Injection" - Data | ====== Author: Pepepistola Pepepistolaatchxsecuritydotorg Program: Generic YouTube Clone Script Severity: Moderately Critical Type of Advisory: Mid Disclosure Affected/Tested...

Design/Logic Flaw

WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module...

CVE-2007-3600

WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module...

CVE-2007-3600

The vulnerability (CVE-2007-3600) affects vtiger CRM prior to 5.0.3, specifically the WordPlugin in the wordintegration component. An authenticated remote user can bypass field-level security permissions and merge arbitrary fields within an Email template, demonstrated by fields in the Contact mo...

CVE-2007-3600: Undefined Security Weakness

WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module...