1668 matches found
CVE-2012-1297
Multiple cross-site request forgery CSRF vulnerabilities in main.php in Contao formerly TYPOlight 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via a delete action in the user module, 2 delete news via a delete action in...
ContaoCMS 2.11.0 Cross Site Request Forgery
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS fka TYPOlight...
ContaoCMS (aka TYPOlight) 2.11 - Cross-Site Request Forgery (Delete Admin Delete Article)
ContaoCMS aka TYPOlight 2.11 - Cross-Site Request Forgery Delete Admin Delete Article +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article...
ContaoCMS (aka TYPOlight) 2.11 - Cross-Site Request Forgery (Delete Admin / Delete Article)
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight CSRF Exploit t...
ContaoCMS (fka TYPOlight) <= 2.11 CSRF (Delete Admin- Delete Article)
Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight...
WordPress Plugin NewsLetter Meenews 5.1 - 'idnews' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50783/info Newsletter Meenews Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
WordPress OdiHost Newsletter 1.0 SQL Injection
Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $newsletterid = $GET"id"; ... $wpdb-query"update newsletterstat set newsletterstatopened = CONCATnewsletterstatopened ,'". $subscriberid . ",' wher...
WordPress OdiHost Newsletter plugin <= 1.0 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress OdiHost Newsletter plugin = 1.0 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/odihost-newsletter-plugin.zip Version: 1.0...
WordPress OdiHost Newsletter Plugin <= 1.0 - SQL Injection
OdiHost Newsletter plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection
WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $newsletterid = $GET"id"; ... $wpdb-query"update newsletterstat set newsletterstatopened =...
WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection
Exploit Title: WordPress OdiHost Newsletter plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $newsletterid = $GET"id"; ... $wpdb-query"update newsletterstat set newsletterstatopened = CONCATnewsletterstatopened ,'". $subscriberid . ",' wher...
European Union - Newsletter CSS Vulnerability
Document Title: =============== European Union - Newsletter CSS Vulnerability References: =========== View: http://www.youtube.com/watch?v=4Zy0sNKqBUQ Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 238 Discovery Status:...
European Union - Newsletter CSS Vulnerability
Document Title: =============== European Union - Newsletter CSS Vulnerability References: =========== View: http://www.youtube.com/watch?v=4Zy0sNKqBUQ Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 238 Discovery Status:...
SA-CONTRIB-2011-031 - SunMailer - Access bypass
SunMailer Newsletter creates an email newsletter that users can subscribe to. The module includes a page where authenticated users can view and/or edit their newsletter subscription. Access to this page was accidentally granted to anonymous users, creating an access bypass that disclosed all user...
PG Newsletter Cross Site Scripting
%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: PG Newsletter persistent XSS vulnerability Vendor: demo.newsletter.pro Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com Google...
Click&Email - Multiple SQL Injection Vulnerabilities
Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...
IW Newsletter v3.5 - Remote SQL Injection Vulnerability
Document Title: =============== IW Newsletter v3.5 - Remote SQL Injection Vulnerability Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 210 Product & Service Introduction: =============================== Interamente sviluppato in ASP,...
Pixel Army Solutions BLIND SQL-i Vulnerability
Exploit for php platform in category web applications ========================================================================= Pixel Army Solutions BLIND SQL-i Vulnerability ==========================================================================...
"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path
"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...
"Simple PHP Newsletter" Remote Admin Password Change With install path
"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...