CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats suffer an improper access control vulnerability that stores sensitive data under the web root, allowing remote attackers to directly download the admin.mdb database file. The issue is documented in CVE-2009-2602 with a base CVSS v2 score of 5.0 (Medium), attack ...

Authentication flaw

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

R2 Newsletter Store Admin Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability...

R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= R2 Newsletter Lite/Pro/Stats admin.mdb Database Disclosure Vuln =================================================================...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability ---------------------------------------------------------------...

DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manag...

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish...

DesignerfreeSolutions Newsletter Manager SQL Injection

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manager Plus.Attach @=S.Site...

DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :Newsletter Manager Plus.Attach @=S.Site...

DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln

Exploit for unknown platform in category web applications ============================================================= DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln ============================================================= @email protected @=Script :Newsletter Manager...

Sql injection

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6286

CVE-2008-6286 affects Active Newsletter 4.3, specifically the SubscriberStart.asp component (and related Subscriber.asp/start.asp paths). The vulnerability is described as multiple SQL injection flaws that allow remote attackers to inject arbitrary SQL via the email (username/E-mail) or password ...

CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

AJA Portal 1.2 Local File Inclusion Vulnerabilities (win)

No description provided by source. -------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6...