21 matches found
EUVD-2005-3063
Malware in sbrugna...
EUVD-2006-0940
Malware in sbrugna...
MailGust <= 1.9 (board takeover) SQL Injection Exploit
No description provided by source. ?php mailgustxpl.php MailGust 1.9 possibly prior versions SQL Injection / board takeover poc exploit with generic HTTP proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
MailGust SQL Injection Vulnerability
The remote web server contains a PHP script that is prone to SQL injection attacks. Description : The remote host appears to be running MailGust, a mailing list manager, newsletter distribution tool and message board. A vulnerability was identified in MailGust, which may be exploited by remote...
MailGust SQL Injection Vulnerability
A vulnerability was identified in MailGust, which may be exploited by remote attackers to execute arbitrary SQL commands. SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Information disclosure
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...
CVE-2006-0937
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...
CVE-2006-0937
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...
CVE-2006-0937
CVE-2006-0937 affects U.N.U. Mailgust 1.9. A direct HTTP request to index.php with method=showfullcsv allows a remote attacker to disclose POP3 server configuration, including account name and password. This is an information disclosure vulnerability due to improper access to configuration data. ...
CVE-2006-0937: Undefined Security Weakness
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...
Mailgust Password Reminder email Field SQL Injection
The remote host appears to be running MailGust, a mailing list manager, newsletter distribution tool and message board. A vulnerability was identified in MailGust that could be exploited by remote attackers to execute arbitrary SQL commands provided PHP's 'magicquotesgpc' setting is disabled...
CVE-2005-3063
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page...
CVE-2005-3063
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page...
CVE-2005-3063
CVE-2005-3063 affects MailGust (v1.9) and describes an SQL injection vulnerability on the password reminder page, exploitable via the email field to execute arbitrary SQL commands. This is evidenced by multiple sources in connected documents (NVD entry, OpenVAS/NASL plugin, and Nessus plugin) sta...
CVE-2005-3063: Undefined Security Weakness
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page...
MailGust 1.9 SQL Injection
MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...
maildisgust.txt
MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...
MailGust <= 1.9 (board takeover) SQL Injection Exploit
No description provided by source. ?php mailgustxpl.php MailGust 1.9 possibly prior versions SQL Injection / board takeover poc exploit with generic HTTP proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
MailGust 1.9 - Board Takeover (SQL Injection)
MailGust 1.9 - Board Takeover SQL Injection ?php mailgustxpl.php MailGust 1.9 possibly prior versions SQL Injection / board takeover poc exploit with generic HTTP proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
MailGust <= 1.9 (board takeover) SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== MailGust = 1.9 board takeover SQL Injection Exploit ====================================================== ?php mailgustxpl.php MailGust 1.9 possibly prior versions SQL Injection / boa...