Lucene search
+L

1667 matches found

0day.today
0day.today
added 2008/11/29 12:0 a.m.18 views

Active Newsletter 4.3 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Newsletter 4.3 Auth Bypass Remote SQL Injection Vulnerability ====================================================================== Tybe:Auth Bypass Remote SQL...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/29 12:0 a.m.38 views

Active NewsLetter 4.3 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

7.5CVSS5.8AI score0.00999EPSS
SaveExploits1
seebug.org
seebug.org
added 2008/11/01 12:0 a.m.18 views

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

No description provided by source. -=======================================- Autore: x0r Cms = Absolute Newsletter 6.1 Bug: Insecure Cookie Handling Vulnerability -=======================================- Exploit: javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE A SERIE...

7.1AI score
SaveExploits0
0day.today
0day.today
added 2008/10/31 12:0 a.m.23 views

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================================== Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability ============================================================== -=======================================- Autore:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/10/31 12:0 a.m.17 views

Absolute NewsLetter 6.1 - Insecure Cookie Handling

Absolute NewsLetter 6.1 - Insecure Cookie Handling -=======================================- Autore: x0r Cms = Absolute Newsletter 6.1 Bug: Insecure Cookie Handling Vulnerability -=======================================- Exploit:...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/31 12:0 a.m.33 views

Absolute NewsLetter 6.1 - Insecure Cookie Handling

-=======================================- Autore: x0r Cms = Absolute Newsletter 6.1 Bug: Insecure Cookie Handling Vulnerability -=======================================- Exploit: javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE A SERIES OF RANDOM NUMBERS AND CHARACTERS...

7.5CVSS5.8AI score0.02511EPSS
SaveExploits2
NVD
NVD
added 2008/10/21 1:18 a.m.21 views

CVE-2008-4625

SQL injection vulnerability in stnliframe.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683...

7.5CVSS8.3AI score0.02726EPSS
SaveExploits2References5
Prion
Prion
added 2008/10/21 1:18 a.m.20 views

Sql injection

SQL injection vulnerability in stnliframe.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683...

7.5CVSS8.7AI score0.02726EPSS
SaveExploits4References5
ATTACKERKB
ATTACKERKB
added 2008/10/21 1:18 a.m.1 views

CVE-2008-4625

SQL injection vulnerability in stnliframe.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683...

7.5CVSS6.4AI score0.02726EPSS
SaveExploits4References6
CVE
CVE
added 2008/10/21 12:0 a.m.56 views

CVE-2008-4625

The CVE-2008-4625 issue concerns the WordPress plugin ShiftThis Newsletter (st_newsletter). A SQL injection exists in the stnl_iframe.php component, exploitable by remote attackers via the newsletter parameter. This aligns with multiple sources (WPVulndb entries for st_newsletter SQL injection an...

7.5CVSS8.4AI score0.02726EPSS
SaveExploits2References5Affected Software1
Drupal
Drupal
added 2008/09/24 12:0 a.m.12 views

SA-2008-056 - Simplenews - Cross site scripting

Simplenews publishes and sends newsletters to lists of subscribers. Newsletter categories are not always properly escaped. This allows users with the "administer taxonomy" permission to add arbitrary HTML and script code to the site. Wikipedia has more information about such cross site scripting...

5.9AI score
SaveExploits0References6
seebug.org
seebug.org
added 2008/08/01 12:0 a.m.17 views

LetterIt 2 (language) Local File Inclusion Vulnerability

No description provided by source. ==================================================================== o LetterIt 2 Local File Inclusion Vulnerability Software : LetterIt Newsletter Manager version 2 Vendor : http://www.letterit.de/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

7.1AI score
SaveExploits0
0day.today
0day.today
added 2008/07/31 12:0 a.m.58 views

LetterIt 2 (language) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== LetterIt 2 language Local File Inclusion Vulnerability ======================================================== ==================================================================== o...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/07/31 12:0 a.m.24 views

letterit2-lfi.txt

==================================================================== o LetterIt 2 Local File Inclusion Vulnerability Software : LetterIt Newsletter Manager version 2 Vendor : http://www.letterit.de/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2008/07/31 12:0 a.m.13 views

LetterIt 2 - Language Local File Inclusion

LetterIt 2 - Language Local File Inclusion ==================================================================== o LetterIt 2 Local File Inclusion Vulnerability Software : LetterIt Newsletter Manager version 2 Vendor : http://www.letterit.de/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/07/31 12:0 a.m.33 views

LetterIt 2 - 'Language' Local File Inclusion

==================================================================== o LetterIt 2 Local File Inclusion Vulnerability Software : LetterIt Newsletter Manager version 2 Vendor : http://www.letterit.de/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

6.8CVSS5.8AI score0.01988EPSS
SaveExploits1
xssed
xssed
added 2008/07/01 12:0 a.m.11 views

Unfixed XSS vulnerability at www.giorgiotave.it

Security researcher kript0, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.giorgiotave.it, which at the time of submission ranked 7522 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is current...

SaveExploits0References1
seebug.org
seebug.org
added 2008/03/19 12:0 a.m.252 views

Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability

No description provided by source. Joomla Component comacajoom SQL Injection Author: fataku Mail : [email protected] Dorks 1 : inurl:"comacajoom" mailingid Sploit:...

7.1AI score
SaveExploits0
Prion
Prion
added 2008/02/12 1:0 a.m.23 views

Sql injection

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

7.5CVSS8.8AI score0.02555EPSS
SaveExploits2References2
NVD
NVD
added 2008/02/12 1:0 a.m.17 views

CVE-2008-0683

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

7.5CVSS8.3AI score0.02555EPSS
SaveExploits2References2
Rows per page
Query Builder