Sendit < 2.1.1 - SQL Injection

The Sendit WP Newsletter WordPress plugin was affected by a SQL Injection security vulnerability...

osCommerce 2.3.4 - Multiple vulnerabilities

No description provided by source. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerable...

osCommerce 2.3.4 - Multiple Vulnerabilities

osCommerce 2.3.4 - Multiple Vulnerabilities Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested on: Apache 2.2.22 at Debian Contact: smash at devilteam.pl Cross Site Scripting 1. Reflected XSS - Send Email Vulnerabl...

ENL Newsletter 1.0.1 - wp-admin/admin.php enl-add-new Page id Parameter SQL Injection

The ENL Newsletter WordPress plugin was affected by a wp-admin/admin.php enl-add-new Page id Parameter SQL Injection security vulnerability...

MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness

The MailUp newsletter sign-up form WordPress plugin was affected by an ajax.functions.php Ajax Function Call H XSS Weakness security vulnerability...

Email Newsletter <= 8.0 - Information Disclosure

The email-newsletter WordPress plugin was affected by an Information Disclosure security vulnerability...

EELV Newsletter 3.4.3 - lettreinfo.php Unspecified XSS

The EELV Newsletter WordPress plugin was affected by a lettreinfo.php Unspecified XSS security vulnerability...

EELV Newsletter - Cross-Site Scripting

The EELV Newsletter WordPress plugin was affected by a Cross-Site Scripting security vulnerability...

SendIt <= 1.5.9 - Blind SQL Injection

The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...

OdiHost Newsletter <= 1.0 - SQL Injection

The odihost-newsletter-plugin WordPress plugin was affected by a SQL Injection security vulnerability...

Plugin Newsletter 1.5 - Remote File Disclosure

The plugin-newsletter WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Newsletter Manager < 1.0.2 - Authenticated Reflected Cross Site Scripting

The Newsletter Manager WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Newsletter Manager < 1.0.2 - Cross-Site Request Forgery

The Newsletter Manager WordPress plugin was affected by a CSRF security vulnerability which could be used to change email addresses, as well as conduct XSS attacks...

CVE-2014-4939

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

Sql injection

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2014-4939

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2014-4939

The CVE-2014-4939 entry concerns the ENL Newsletter (enl-newsletter) WordPress plugin, version 1.0.1. Affected component: wp-admin/admin.php enl-add-new page, where the id parameter allows SQL injection. The root cause is an input parameter in the admin interface that can be manipulated to execut...

osCommerce 2.3.4 - Multiple vulnerabilities

Latest osCommerce software suffers on multiple cross site scripting and cross site request forgery vulnerabilities, which even may lead to remote code execution. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested o...

Critical Vulnerability in Wordpress Plugin Could Allow Site Takeover

WordPress users that have a popular plugin installed are being cautioned to upgrade immediately. A vulnerability in the plugin, MailPoet, could essentially allow an attacker to take over any site running it without authentication. MailPoet, formerly Wysija, allows developers running WordPress to...

ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article Date : 25-02-2012 Author : Ivano Binetti...