Critical Vulnerability in Wordpress Plugin Could Allow Site Takeover

WordPress users that have a popular plugin installed are being cautioned to upgrade immediately. A vulnerability in the plugin, MailPoet, could essentially allow an attacker to take over any site running it without authentication. MailPoet, formerly Wysija, allows developers running WordPress to...

Newsletter Tailor Database Backup Dump Vulnerability

No description provided by source...

Classifieds Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Classifieds SQL Injection Vendor url:http://getaphpsite.com Version...

ZaireWeb Solutions Newsletter ZWS Administrative Interface Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10605/info Newsletter ZWS is reported prone to an administrative interface authentication bypass vulnerability. The vulnerability exists due to a design error in the implementation of the authentication system for the...

Digger Solutions Newsletter Open Source SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic,...

NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://knusperleicht.at/ | |...

STRATO Newsletter Manager Directory Traversal

No description provided by source. STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:newsletter.php.cgi Exploit:...

Newsletter Tailor 0.2.0 - RFI Vulnerability

No description provided by source...

Artmedic Newsletter 4.1 Log.PHP Remote Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18047/info Artmedic Newsletter is prone to a remote PHP code-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to creat...

WordPress OdiHost Newsletter plugin <= 1.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress OdiHost Newsletter plugin = 1.0 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/odihost-newsletter-plugin.zip Version: 1.0...

Blue Dove SQL Injection Vulnerability

No description provided by source. .:. Author : HackXBack [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Blue Dove Word Press Development .:. Bug Type : Sql Injection .:. Dork : powered by Blue Dove Web Design === Exploit ===...

ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article Date : 25-02-2012 Author : Ivano Binetti...

Wordpress Plugin: Newsletter 1.5 - Remote File Disclosure Vulnerability

No description provided by source...

open newsletter <= 2.5 - Multiple Vulnerabilities exploit (update)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo \r\n; echo Open Newsletter = 2. Muliple Vulnerabilities\r\n; echo Site: http://www.selfexile.com/projects/opennewsletter/\r\n; echo Dork: \This is a Free & Open Source mailing list manager\r\n; echo by BlackHawk...

AJA Portal 1.2 - Local File Inclusion Vulnerabilities (win)

No description provided by source. -------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6...

Newsletter Tailor (Auth Bypass) SQL Injection Vulnerability

No description provided by source...

Real Estate SQL Injection Vulnerability

No description provided by source. Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail...

Ametys CMS 3.5.2 - (lang parameter) XPath Injection Vulnerability

No description provided by source. Ametys CMS 3.5.2 lang parameter XPath Injection Vulnerability Vendor: Anyware Services Product web page: http://www.ametys.org Download: http://www.ametys.org/en/download/ametys-cms.html Affected version: 3.5.2 and 3.5.1 Summary: Ametys is a Java-based open sour...

WordPress Plugin ShiftThis Newsletter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27586/info The ShiftThis Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

WordPress Plugin ENL NewsLetter - wp-adminadmin.php SQL Injection

WordPress Plugin ENL NewsLetter - wp-adminadmin.php SQL Injection source: https://www.securityfocus.com/bid/68558/info ENL Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue t...