WordPress Plugin NewsLetter 1.5 - Remote File Disclosure

WordPress Plugin NewsLetter 1.5 - Remote File Disclosure Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date...

WordPress Newsletter 1.5 File Disclosure

Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date : 31-05-2012 Google Dork :...

WordPress Newsletter Plugin 1.5 - Remote File Disclosure

WordPress Newsletter plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the plugin...

WordPress Plugin NewsLetter 1.5 - Remote File Disclosure

Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date : 31-05-2012 Google Dork :...

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can...

WordPress Email Newsletter Plugin 8.0 - Information Disclosure Vulnerability

WordPress Email Newsletter plugin is prone to an information disclosure vulnerability. It allows an attacker to obtain sensitive information that may aid in further attacks. Solution Update the plugin...

Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Google...

WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure

source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...

WordPress Email Newsletter 8.0 Information Disclosure

Description : Wordpress Plugins - Email Newsletter Information Disclosure Vulnerability Version : 8.0 Link : http://wordpress.org/extend/plugins/email-newsletter/ Plugins : http://downloads.wordpress.org/plugin/email-newsletter.zip Date : 28-05-2012 Google Dork :...

WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53523/info Newsletter Manager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input...

WordPress Newsletter Manager Plugin 1.0 - Multiple Cross Site Scripting

WordPress Newsletter Manager plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Newsletter Manager 1.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53523/info Newsletter Manager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues ...

Strato Newsletter Manager Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...

STRATO NewsLetter Manager - Directory Traversal

STRATO NewsLetter Manager - Directory Traversal STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...

STRATO Newsletter Manager Directory Traversal

Exploit for php platform in category web applications STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...

STRATO NewsLetter Manager - Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilites

Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=505 VL-ID: ===== 505 Introduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them an...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilites

Exploit for php platform in category web applications Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 ntroduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them and send newsletters. Acc PHP eMai is...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilities

Document Title: =============== ACC PHP eMail v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=505 Release Date: ============= 2012-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 505 Produ...