1706 matches found
WordPress Newsletter Plugin 1.5 - Remote File Disclosure
WordPress Newsletter plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the plugin...
WordPress Plugin NewsLetter 1.5 - Remote File Disclosure
Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date : 31-05-2012 Google Dork :...
WordPress Email Newsletter Plugin 8.0 - Information Disclosure Vulnerability
WordPress Email Newsletter plugin is prone to an information disclosure vulnerability. It allows an attacker to obtain sensitive information that may aid in further attacks. Solution Update the plugin...
Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability
Exploit for php platform in category web applications Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Google...
WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure
WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can...
WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure
source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...
WordPress Email Newsletter 8.0 Information Disclosure
Description : Wordpress Plugins - Email Newsletter Information Disclosure Vulnerability Version : 8.0 Link : http://wordpress.org/extend/plugins/email-newsletter/ Plugins : http://downloads.wordpress.org/plugin/email-newsletter.zip Date : 28-05-2012 Google Dork :...
WordPress Newsletter Manager 1.0 Cross Site Scripting
Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...
WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53523/info Newsletter Manager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues ...
WordPress Newsletter Manager Plugin 1.0 - Multiple Cross Site Scripting
WordPress Newsletter Manager plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53523/info Newsletter Manager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input...
Strato Newsletter Manager Directory Traversal
STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...
STRATO Newsletter Manager Directory Traversal
Exploit for php platform in category web applications STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...
STRATO NewsLetter Manager - Directory Traversal
STRATO NewsLetter Manager - Directory Traversal STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit:...
STRATO NewsLetter Manager - Directory Traversal
STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...
ACC PHP eMail v1.1 - Multiple Web Vulnerabilites
Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=505 VL-ID: ===== 505 Introduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them an...
ACC PHP eMail v1.1 - Multiple Web Vulnerabilites
Exploit for php platform in category web applications Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 ntroduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them and send newsletters. Acc PHP eMai is...
ACC PHP eMail v1.1 - Multiple Web Vulnerabilities
Document Title: =============== ACC PHP eMail v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=505 Release Date: ============= 2012-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 505 Produ...
CVE-2012-1297
Multiple cross-site request forgery CSRF vulnerabilities in main.php in Contao formerly TYPOlight 2.11.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via a delete action in the user module, 2 delete news via a delete action in...