1702 matches found
CVE-2006-6787
CVE-2006-6787 is a SQL injection vulnerability in Newsletter MX 1.0.2 and earlier. The flaw resides in the admin/admin_mail_adressee.asp page, where the ID parameter can be manipulated to cause the application to execute arbitrary SQL commands. Documents provided do not include exploit code or in...
EUVD-2006-6768
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...
CVE-2006-6786
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to 1 subscribe.php or 2 unsubscribe.php...
Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /\// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print...
Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "...
Open Newsletter <= 2.5 Multiple Remote Vulnerabilities Exploit (update)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Open Newsletter = 2. Muliple Vulnerabilities\r\n"; echo "Site: http://www.selfexile.com/projects/opennewsletter/\r\n"; echo "Dork: "This is a Free & Open Source mailing list manager"\r\n"; echo "by...
NewsLetter MX 1.0.2 - ID SQL Injection
NewsLetter MX 1.0.2 - ID SQL Injection !/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "--...
NewsLetter MX 1.0.2 - 'ID' SQL Injection
!/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit;...
open NewsLetter 2.5 - Multiple Vulnerabilities (2)
!/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: None\r\n"; echo " |- Es: php ".$argv0." localhost /opnletter/ 1\r\n\r\n"; echo " 2 - Credential Retrieve\r\n"; echo " |- Related: None\r\n"; echo " |- Es: php...
Knusperleicht NewsLetter Index.PHP远程文件包含漏洞
Knusperleicht NewsLetter是一款基于PHP的新闻管理程序。 Knusperleicht NewsLetter不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"NLPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht NewsLetter 3.5 http://knusperleicht.at/index.php?knuspi=phpecke http://example.com/Script...
Ban v0.1 (bannieres.php) File Include
Ban v0.1 bannieres.php File Include Source Code: ftp://ftp1.comscripts.com/PHP/1959ban01-01.zip Vulnerable Code: modules/bannieres/bannieres.php In Line 13 : include "$chemin/includes/connexion.php" ; Exploit : http://www.VicTim.com/BanPath/modules/bannieres/bannieres.php?chemin=Sh3ll.txt?...
CVE-2006-5101
CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...
Comdev Newsletter 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Newsletter 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Newsletter 3.1 + Venedor ...........: http://www.comdevweb.com + Class...
CVE-2006-3986
PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NLPATH parameter...
CVE-2006-3986
The CVE concerns Knusperleicht Newsletter 3.5 and earlier, where index.php is vulnerable to a PHP remote file inclusion via the NL_PATH parameter. The root cause is improper handling/validation of the NL_PATH input, allowing an attacker to include a remote PHP file and thereby execute arbitrary c...
NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== NewsLetter = 3.5 NLPATH Remote File Inclusion Vulnerability ===============================================================...
NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://knusperleicht.at/ | |...
Design/Logic Flaw
artmedic newsletter 4.1 and possibly other versions, when registerglobals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an...
CVE-2006-2608
artmedic newsletter 4.1 and possibly other versions, when registerglobals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an...
Information disclosure
artmedic newsletter 4.1.2 and possibly other versions, when registerglobals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletterlog.php. NOTE: the provenance of this information is unknown; the details are obtained sole...