European Union - Newsletter CSS Vulnerability

Document Title: =============== European Union - Newsletter CSS Vulnerability References: =========== View: http://www.youtube.com/watch?v=4Zy0sNKqBUQ Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 238 Discovery Status:...

SA-CONTRIB-2011-031 - SunMailer - Access bypass

SunMailer Newsletter creates an email newsletter that users can subscribe to. The module includes a page where authenticated users can view and/or edit their newsletter subscription. Access to this page was accidentally granted to anonymous users, creating an access bypass that disclosed all user...

PG Newsletter Cross Site Scripting

%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: PG Newsletter persistent XSS vulnerability Vendor: demo.newsletter.pro Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com Google...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...

IW Newsletter v3.5 - Remote SQL Injection Vulnerability

Document Title: =============== IW Newsletter v3.5 - Remote SQL Injection Vulnerability Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 210 Product & Service Introduction: =============================== Interamente sviluppato in ASP,...

Pixel Army Solutions BLIND SQL-i Vulnerability

Exploit for php platform in category web applications ========================================================================= Pixel Army Solutions BLIND SQL-i Vulnerability ==========================================================================...

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

"Simple PHP Newsletter" Remote Admin Password Change With install path

"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

"Simple PHP Newsletter" Remote Admin Password Change With install path

"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com downl...

Simple PHP Newsletter Administrator Password Change

"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

WESPA PHP Newsletter 3.0 Administrator Password Change

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

Diggersolutions Newsletter - Remote File Upload Vulnerabilities

Exploit for php platform in category web applications =============================================================== Diggersolutions Newsletter - Remote File Upload Vulnerabilities ===============================================================...

Diggersolutions Newsletter 2.7.1 SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX. Greetz to :...

Diggersolutions Newsletter SQL injection Vulnerability

Exploit for asp platform in category web applications ====================================================== Diggersolutions Newsletter SQL injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

Digger Solutions NewsLetter Open Source - SQL Injection

Digger Solutions NewsLetter Open Source - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects,...

Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting Information Leakage

Simpli Easy AFC Simple NewsLetter 4.2 - Cross-Site Scripting Information Leakage Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP...

Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting / Information Leakage

Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt Proof-of-concept: http://www.example.com/el.txt...

SA-CONTRIB-2010-089 - Simplenews Content Selection - Cross Site Scripting

This module allows you to select content from your website and send a newsletter with the selected content. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full...

Classifieds Script - 'rate' SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Classifieds SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...