CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

Directory traversal

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

CVE-2012-3588

CVE-2012-3588 corresponds to a directory traversal vulnerability in the WordPress Newsletter plugin (version 1.5) where the preview.php script fails to sanitize the data parameter, allowing remote attackers to read arbitrary files using .. in the data parameter. Multiple sources (WPScan, Tenable/...

CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

PT-2012-4831

Name of the Vulnerable Software and Affected Versions Plugin Newsletter plugin version 1.5 for WordPress Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the preview.php file. This is achieved by using a .. dot dot in the data...

CVE-2012-3588: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...

Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities

Document Title: =============== Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=573 Release Date: ============= 2012-06-17 Vulnerability Laboratory ID VL-ID:...

Swoopo Gold Shop CMS 8.4.56 Cross Site Scripting / SQL Injection

Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: ============...

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...

WordPress Newsletter 1.5 File Disclosure

Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date : 31-05-2012 Google Dork :...

WordPress Newsletter Plugin 1.5 - Remote File Disclosure

WordPress Newsletter plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the plugin...

WordPress Plugin NewsLetter 1.5 - Remote File Disclosure

WordPress Plugin NewsLetter 1.5 - Remote File Disclosure Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date...

WordPress Plugin NewsLetter 1.5 - Remote File Disclosure

Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Date : 31-05-2012 Google Dork :...

Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Plugin: Newsletter Remote File Disclosure Vulnerability Version : 1.5 Link : http://wordpress.org/extend/plugins/plugin-newsletter/ Plugins : http://downloads.wordpress.org/plugin/plugin-newsletter.zip Google...

WordPress Email Newsletter Plugin 8.0 - Information Disclosure Vulnerability

WordPress Email Newsletter plugin is prone to an information disclosure vulnerability. It allows an attacker to obtain sensitive information that may aid in further attacks. Solution Update the plugin...

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can...

WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure

source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...

WordPress Email Newsletter 8.0 Information Disclosure

Description : Wordpress Plugins - Email Newsletter Information Disclosure Vulnerability Version : 8.0 Link : http://wordpress.org/extend/plugins/email-newsletter/ Plugins : http://downloads.wordpress.org/plugin/email-newsletter.zip Date : 28-05-2012 Google Dork :...

WordPress Newsletter Manager 1.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Newsletter Manager Plugin 1.0 - Multiple Cross Site Scripting

WordPress Newsletter Manager plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...