WordPress Plugin WP Mail Log 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-14759 · Wpvibes · Wpvibes Wp Mail Log

Name of the Vulnerable Software and Affected Versions: WPVibes WP Mail Log plugin versions 1.0.1 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF in the WPVibes WP Mail Log plugin. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

Design/Logic Flaw

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12784

CVE-2020-12784 affects cPanel prior to 86.0.14. The issue allows remote attackers to trigger a bandwidth suspension by abusing specific mail log strings (SEC-505). Public references (NVD/Red Hat/CVE listings) corroborate a network-trajectory issue with low attack complexity and no authentication ...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12784: Undefined Security Weakness

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

PT-2020-13265

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 86.0.14 Description The issue allows remote attackers to trigger a bandwidth suspension via mail log strings. Recommendations For versions prior to 86.0.14, update to version 86.0.14 or later to resolve the issue...

CVE-2012-2324

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

Sql injection

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

CVE-2012-2324

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

CVE-2012-2324: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

PT-2012-3951

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.6.7 Description The issue allows remote administrators to execute arbitrary SQL commands via unspecified vectors in the user search or Mail Log in the Admin Control Panel ACP. Recommendations For versions prior to 1.6....

Mandriva Update for mailgraph MDVA-2010:206 (mailgraph)

Check for the Version of mailgraph OpenVAS Vulnerability Test Mandriva Update for mailgraph MDVA-2010:206 mailgraph Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2001-1075

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file...

Cobalt Raq3 PopRelayD - Arbitrary SMTP Relay

source: https://www.securityfocus.com/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address they're accessing the system with. poprelayd...