WordPress ALO EasyMail Newsletter Plugin <= 12.6.00 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery

WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability Software Link: https://wordpress.org/plugins/alo-easymail/ Affected Version: 2.6.01 Exploit Author: Mohsen Lotfi Contact:...

WordPress ALO EasyMail Newsletter Plugin 2.6.01 - CSRF

ALO EasyMail Newsletter plugin is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the plugin...

WordPress Newsletter Pro Plugin Open Redirect

The Newsletter Plugin for WordPress contains a flaw that allows a remote cross-site redirection attack. This could allow a user to create a specially crafted URL, that if clicked, would redirect a victim from the intended legitimate web site to an arbitrary web site of the attacker's choosing...

WordPress Newsletter Pro 2.5.3.3 Open Redirect

^^^^^^^^^^^ ^ Exploit Title : Wordpress Newsletter Pro Plugin Open Redirect ^ Exploit Author : Ashiyane Digital Security Team ^ Vendor Homepage: http://www.thenewsletterplugin.com/downloads ^ Google Dork : inurl:newsletter-pro/do.php ^ Date : 06 Feb. 2016 ^ Tested On : Win 10 | CyberFox Browser &...

education.ohio.gov XSS vulnerability

Vulnerable URL: https://education.ohio.gov/Miscellaneous/Newsletter-Search?pagetitle=%3Csvg/onload=confirm%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Ovidentia newsletter Module 2.2 - (admin.php) Remote File Inclusion Exploit

Exploit for php platform in category web applications Title: Ovidentia Module newsletter 2.2 admin.php Remote File Inclusion Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ovidentia NewsLetter Module 2.2 - admin.php Remote File Inclusion

Ovidentia NewsLetter Module 2.2 - admin.php Remote File Inclusion Title: Ovidentia Module newsletter 2.2 admin.php Remote File Inclusion Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ovidentia NewsLetter Module 2.2 - 'admin.php' Remote File Inclusion

Title: Ovidentia Module newsletter 2.2 admin.php Remote File Inclusion Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

newsletter-europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-111849 Description| Value ---|--- Affected Website:| newsletter-europa.eu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Email Newsletter <= 20.15 - SQL Injection

Plugin is still affected and has been closed...

xe.com XSS vulnerability

Vulnerable URL: http://www.xe.com/email/cus/cusnewsletter.php?basecur=USD=2009-05-20⊂=CUSD3FA4958E1E7%22%3E%3Ch1%3E@Lewis%3C/h1%3E%3Csvg/onload=window.onerror=alert;throw/x/;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...

WordPress Email Newsletter Plugin <= 20.13.6 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "search". Solution Update the plugin...

Joomla JNews (com_jnews) Component 8.5.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Description of the component: Reach, engage and delight more customers with newsletters, auto-responders or campaign management. Exploit Title: Joomla component comjnews - SQL injection Google Dork: inurl:option=comjnews Date: 2015-10-29 Explo...

Joomla! Component com_jnews 8.5.1 - SQL Injection

Description of the component: Reach, engage and delight more customers with newsletters, auto-responders or campaign management. Exploit Title: Joomla component comjnews - SQL injection Google Dork: inurl:option=comjnews Date: 2015-10-29 Exploit Author: Omer Ramić Twitter:...

dhakatimes.com.bd XSS vulnerability

Vulnerable URL: http://dhakatimes.com.bd/newsletter-subscription-form/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 19:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 42322 Google Pagerank| 0 VIP website...

WordPress Newsletter Plugin <= 3.0.8 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Upgrade the plugin...

racecompany.fr XSS vulnerability

Vulnerable URL: http://www.racecompany.fr/newsletter-abonnement.php/'%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert%28'XSSPOSED'%29%3C/scRipt%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

PHPBoost 4.0 & 4.1 - XSS Reflected Vulnerability

Exploit for php platform in category web applications =================================== Title : PHPBoost 4.0 & 4.1 - XSS Reflected Vulnerability Author : ZwX Date : 04/02/2015 Vendor : http://www.phpboost.com/ Tested on : Windows 7 =================================== Description an XSS Reflecte...

facwellness.com XSS vulnerability

Vulnerable URL: http://www.facwellness.com/newsletter.php?email=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:47 GMT Vulnerability type:|...