Chipmunk Newsletter Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ================================================ Chipmunk Newsletter Persistant XSS Vulnerability ================================================ Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Chipmunk NewsLetter - Persistent Cross-Site Scripting Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization:...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...

Cross site scripting

Cross-site scripting XSS vulnerability in the newsletter configuration feature in the backend module in the Direct Mail directmail extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4159: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the newsletter configuration feature in the backend module in the Direct Mail directmail extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2009-080 - Simplenews Statistics - Multiple vulnerabilities

The Simplenews Statistics module provides newsletter statistics such as the open rate and CTR click-through rate. The module suffers multiple vulnerabilities, including Cross Site Request Forgeries CSRF, Cross Site Scripting problem Cross Site Scripting and Open Redirect. This problem allows an...

Joomla com_jinc (newsid) Blind SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

Joomla Jinc SQL Injection

--------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Email :...

Joomla component com_jinc (newsid) Blind SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

Joomla! Component com_jinc 0.2 - newsid Blind SQL Injection

Joomla! Component comjinc 0.2 - newsid Blind SQL Injection --------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author :...

Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection

--------------------------------------------------------------------------------- joomla component comjinc newsid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Email :...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats suffer an improper access control vulnerability that stores sensitive data under the web root, allowing remote attackers to directly download the admin.mdb database file. The issue is documented in CVE-2009-2602 with a base CVSS v2 score of 5.0 (Medium), attack ...

CVE-2009-2602: Undefined Security Weakness

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb...

Authentication flaw

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2008-6861

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6861: Improper Authentication

Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

R2 Newsletter Store Admin Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...