wanewsletter <= 2.1.3 - Remote File Inclusion Vulnerability

No description provided by source. ======================= S==A==U==D==I ======================== WAnewsletter-2.1.3 newsletter.php RFI Vul ============================================================== Found By : Mogatil , [email protected]...

Design/Logic Flaw

The getObjectByToken function in Newsletter.php in the PimcoreToolNewsletter module in pimcore 1.4.9 through 2.1.0 does not properly handle an object obtained by unserializing a pathname, which allows remote attackers to conduct PHP object injection attacks and delete arbitrary files via vectors...

CVE-2014-2921

CVE-2014-2921 affects Pimcore’s Newsletter tool. The vulnerability in the getObjectByToken function (Newsletter.php) occurs in Pimcore versions 1.4.9–2.0.0 and stems from improper handling of an object obtained by unserializing Lucene search data, enabling PHP object injection and arbitrary code ...

CVE-2014-2921: Improper Control of Generation of Code

The getObjectByToken function in Newsletter.php in the PimcoreToolNewsletter module in pimcore 1.4.9 through 2.0.0 does not properly handle an object obtained by unserializing Lucene search data, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via...

S.A.R.L EL-MITHAK => Newsletter.php Xss & SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== S.A.R.L EL-MITHAK = Newsletter.php Xss & SQL Injection Vulnerability ===================================================================== Title: S.A.R.L EL-MITHAK...

Sql injection

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

CVE-2010-1740

GuppY CRM is affected: v4.5.18 contains an SQL injection in newsletter.php where the lng parameter is unsafely used, allowing a remote attacker to execute arbitrary SQL commands. No remediation or exploit specifics are provided in the supplied documents.

CVE-2010-1740: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

GuppY 4.5.18 - Blind SQL Injection / XPath Injection

======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug ...

CVE-2007-2969

PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter...

CVE-2007-2969: Undefined Security Weakness

PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter...

WAnewsletter <= 2.1.3 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= WAnewsletter = 2.1.3 Remote File Inclusion Vulnerability ========================================================= ======================= S==A==U==D==I ========================...

wanewsletter 2.1.3 - Remote File Inclusion

wanewsletter 2.1.3 - Remote File Inclusion ======================= S==A==U==D==I ======================== WAnewsletter-2.1.3 newsletter.php RFI Vul ============================================================== Found By : Mogatil , [email protected]...

wanewsletter 2.1.3 - Remote File Inclusion

======================= S==A==U==D==I ======================== WAnewsletter-2.1.3 newsletter.php RFI Vul ============================================================== Found By : Mogatil , [email protected] ============================================================== Script Site :...

Sql injection

SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter...

CVE-2006-1533

SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter...

CVE-2006-1533: Undefined Security Weakness

SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter...