CVE-2017-6576

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2017-6571

The CVE-2017-6571 entry concerns a SQL injection in the WordPress Mail Masta (mail-masta) plugin v1.0. The vulnerability is triggered in ./inc/campaign/view-campaign.php via the GET parameter id, potentially exposing the database to arbitrary SQL commands when the attacker has WordPress admin acc...

CVE-2017-6578: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6576: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2017-6574: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6572: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/addmember.php with the GET Parameter: filterlist...

CVE-2017-6571: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

CVE-2017-6577: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6573: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id...

CVE-2017-6575: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

PT-2017-17166

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. The issue affects the ./inc/lists/edit-list.php file, specifically with the id GET parameter. Recommendations For...

PT-2017-17168

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/lists/edit member.php file, specifically with the member id GET parameter...

PT-2017-17165

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/lists/add member.php file, specifically the filter list GET parameter. Recommendations...

PT-2017-17170

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/subscriber list.php file, specifically the list id parameter in POST requests...

PT-2017-17167

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/lists/edit member.php file, specifically with the filter list GET parameter...

CVE-2017-6570: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Parameter: id...

PT-2017-17163

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/view-campaign-list.php file, specifically the id GET parameter. Recommendatio...

PT-2017-17171

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/subscriber list.php file, specifically the subscriber email parameter in POST requests...

PT-2017-17169

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/campaign-delete.php file, specifically the id GET parameter. Recommendations...

PT-2017-17164

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/view-campaign.php file, specifically the id GET parameter. Recommendations Fo...