Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection

--------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Email :...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats suffer an improper access control vulnerability that stores sensitive data under the web root, allowing remote attackers to directly download the admin.mdb database file. The issue is documented in CVE-2009-2602 with a base CVSS v2 score of 5.0 (Medium), attack ...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

R2 Newsletter Store Admin Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= R2 Newsletter Lite/Pro/Stats admin.mdb Database Disclosure Vuln =================================================================...

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability ---------------------------------------------------------------...

R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manag...

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish...

DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln

Exploit for unknown platform in category web applications ============================================================= DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln ============================================================= @email protected @=Script :Newsletter Manager...

DesignerfreeSolutions Newsletter Manager SQL Injection

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manager Plus.Attach @=S.Site...

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manager Plus.Attach @=S.Site...

Sql injection

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...