Wordpress Email newsletter 20.9 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Email newsletter 20.9 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/email-newsletter/ Software Link :...

Improper Access Control in WebDav for filemounts (webdav)

It has been discovered that the extension "WebDav for filemounts" webdav is susceptible to Improper Access Control. Release Date: November 27, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 2.0.0 Vulnerability Type:...

Sendit < 2.1.1 - SQL Injection

The Sendit WP Newsletter WordPress plugin was affected by a SQL Injection security vulnerability...

osCommerce 2.3.4 - Multiple vulnerabilities

No description provided by source. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerable...

osCommerce 2.3.4 - Multiple Vulnerabilities

osCommerce 2.3.4 - Multiple Vulnerabilities Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerabl...

ENL Newsletter 1.0.1 - wp-admin/admin.php enl-add-new Page id Parameter SQL Injection

The ENL Newsletter WordPress plugin was affected by a wp-admin/admin.php enl-add-new Page id Parameter SQL Injection security vulnerability...

MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness

The MailUp newsletter sign-up form WordPress plugin was affected by an ajax.functions.php Ajax Function Call H XSS Weakness security vulnerability...

Email Newsletter <= 8.0 - Information Disclosure

The email-newsletter WordPress plugin was affected by an Information Disclosure security vulnerability...

EELV Newsletter - Cross-Site Scripting

The EELV Newsletter WordPress plugin was affected by a Cross-Site Scripting security vulnerability...

EELV Newsletter 3.4.3 - lettreinfo.php Unspecified XSS

The EELV Newsletter WordPress plugin was affected by a lettreinfo.php Unspecified XSS security vulnerability...

SendIt <= 1.5.9 - Blind SQL Injection

The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...

OdiHost Newsletter <= 1.0 - SQL Injection

The odihost-newsletter-plugin WordPress plugin was affected by a SQL Injection security vulnerability...

Plugin Newsletter 1.5 - Remote File Disclosure

The plugin-newsletter WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Newsletter Manager < 1.0.2 - Cross-Site Request Forgery

The Newsletter Manager WordPress plugin was affected by a CSRF security vulnerability which could be used to change email addresses, as well as conduct XSS attacks...

Newsletter Manager < 1.0.2 - Authenticated Reflected Cross Site Scripting

The Newsletter Manager WordPress plugin was affected by a Cross Site Scripting security vulnerability...

CVE-2014-4939

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

Sql injection

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2014-4939

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2014-4939

The CVE-2014-4939 entry concerns the ENL Newsletter (enl-newsletter) WordPress plugin, version 1.0.1. Affected component: wp-admin/admin.php enl-add-new page, where the id parameter allows SQL injection. The root cause is an input parameter in the admin interface that can be manipulated to execut...

osCommerce 2.3.4 - Multiple vulnerabilities

Latest osCommerce software suffers on multiple cross site scripting and cross site request forgery vulnerabilities, which even may lead to remote code execution. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested o...