1706 matches found
CVE-2007-2792
SQL injection vulnerability in the Yet another Newsletter Component aka YaNC or comyanc component before 1.5 beta 3 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter to index.php. NOTE: some of these details are obtained from third party...
Sql injection
SQL injection vulnerability in the Yet another Newsletter Component aka YaNC or comyanc component before 1.5 beta 3 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter to index.php. NOTE: some of these details are obtained from third party...
CVE-2007-2792
SQL injection vulnerability in the Yet another Newsletter Component aka YaNC or comyanc component before 1.5 beta 3 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter to index.php. NOTE: some of these details are obtained from third party...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...
CVE-2007-2579
Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...
phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities
phpMyNewsletter 0.8 beta5 - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc Delete Config Value Rude Attack - can't do anything after 2 - Send an Email to all of the subscribers Do not alter anything Related: 1 - None...
Sql injection
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
CVE-2007-1696
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
CVE-2007-1696
CVE-2007-1696 describes a SQL injection in ViewNewspapers.asp for Active Newsletter 4.3 and earlier. The vulnerability is triggered via the NewsPaperID parameter, allowing remote attackers to execute arbitrary SQL commands. The affected component is the ViewNewspapers.asp page within the Active N...
CVE-2007-1696
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
an-sql.txt
Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter Active Newsletter font face="...
Active Newsletter <= 4.3 (ViewNewspapers.asp) SQL Injection Exploit
No description provided by source. Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter = V.4.3 ViewNewspapers.asp Remote SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : :...
Active Newsletter <= 4.3 (ViewNewspapers.asp) SQL Injection Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleActive Newsletter = V.4.3 ViewNewspapers.asp Remote SQL Injection Exploit/title script language="JavaScript"...
Active Newsletter <= 4.3 (ViewNewspapers.asp) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Active Newsletter Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter =...
Active NewsLetter 4.3 - ViewNewspapers.asp SQL Injection
Active NewsLetter 4.3 - ViewNewspapers.asp SQL Injection Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter Active Newsletter form method="post" target="getting" name=...
Active NewsLetter 4.3 - 'ViewNewspapers.asp' SQL Injection
Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter Active Newsletter font face="Arial" size="1" co...
CVE-2007-1179
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...
CVE-2006-6786
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to 1 subscribe.php or 2 unsubscribe.php...
CVE-2006-6785
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...