Lucene search
+L

1667 matches found

Cvelist
Cvelist
added 2008/02/12 12:0 a.m.20 views

CVE-2008-0683

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

8.3AI score0.02555EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2008/02/11 12:0 a.m.18 views

WordPress Newsletter Plugin - SQL Injection #2

Because of this vulnerability in shiftthis-preview.php, the attackers can execute arbitrary SQL commands via the "newsletter" parameter. Solution Update the plugin...

7.5CVSS6.4AI score0.02555EPSS
SaveExploits2References1Affected Software1
exploitpack
exploitpack
added 2008/02/03 12:0 a.m.15 views

WordPress Plugin ShiftThis NewsLetter - SQL Injection

WordPress Plugin ShiftThis NewsLetter - SQL Injection source: https://www.securityfocus.com/bid/27586/info The ShiftThis Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/02/03 12:0 a.m.22 views

WordPress Plugin ShiftThis NewsLetter - SQL Injection

source: https://www.securityfocus.com/bid/27586/info The ShiftThis Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

5.8AI score
SaveExploits0
Prion
Prion
added 2008/01/31 8:0 p.m.15 views

Sql injection

SQL injection vulnerability in index.php in the Newsletter comnewsletter component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2008/01/31 8:0 p.m.21 views

CVE-2008-0510

SQL injection vulnerability in index.php in the Newsletter comnewsletter component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2008/01/31 7:30 p.m.24 views

CVE-2008-0510

SQL injection vulnerability in index.php in the Newsletter comnewsletter component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

8.4AI score0.00967EPSS
SaveExploits2References4
seebug.org
seebug.org
added 2008/01/30 12:0 a.m.20 views

Mambo Component Newsletter (listid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomnewsletter AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comnewsletter" EXPLOIT : index.php?option=comnewsletter&Itemid=S@BUN&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com...

7.1AI score
SaveExploits0
0day.today
0day.today
added 2008/01/29 12:0 a.m.20 views

Mambo Component Newsletter (listid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mambo Component Newsletter listid Remote SQL Injection Vulnerability ====================================================================== joomla SQL...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/01/24 12:0 a.m.32 views

aconon-traverse.txt

Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a commercial newsletter software, providi...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2008/01/23 12:0 a.m.21 views

Aconon Mail 2004 - Directory Traversal

Aconon Mail 2004 - Directory Traversal Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a...

0.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/01/23 12:0 a.m.32 views

Aconon Mail 2004 Remote Directory Traversal Vulnerability

No description provided by source. Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/01/23 12:0 a.m.50 views

Aconon Mail 2004 - Directory Traversal

Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a commercial newsletter software, providi...

5CVSS5.8AI score0.03323EPSS
SaveExploits2
Prion
Prion
added 2007/10/14 7:17 p.m.18 views

Sql injection

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

6.8CVSS9.1AI score0.00945EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2007/10/14 7:17 p.m.18 views

CVE-2007-5458

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

6.8CVSS8.4AI score0.00945EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2007/10/14 7:0 p.m.25 views

CVE-2007-5458

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

8.4AI score0.00945EPSS
SaveExploits1References4
CVE
CVE
added 2007/10/14 7:0 p.m.44 views

CVE-2007-5458

CVE-2007-5458 describes an SQL injection in index.php of the KwsPHP newsletter module 1.0. The vulnerability occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the newsletter parameter. This is supported by multiple connected records (NVD/NVD listing, ...

6.8CVSS8.4AI score0.00945EPSS
SaveExploits1References4Affected Software2
seebug.org
seebug.org
added 2007/10/13 12:0 a.m.17 views

KwsPHP 1.0 Newsletter Module Remote SQL Injection Exploit

No description provided by source. Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/10/11 12:0 a.m.8 views

KwsPHP 1.0 Module Newsletter - SQL Injection

KwsPHP 1.0 Module Newsletter - SQL Injection Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................:...

0.2AI score
SaveExploits0
0day.today
0day.today
added 2007/10/11 12:0 a.m.21 views

KwsPHP 1.0 Newsletter Module Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= KwsPHP 1.0 Newsletter Module Remote SQL Injection Exploit ========================================================= Script....................................: KwsPHP ver 1.0...

7.1AI score
SaveExploits0
Rows per page
Query Builder