CVE-2009-0340

Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. dot dot in the olang parameter to 1 mail.php and 2 mailbar.php...

CVE-2009-0340: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. dot dot in the olang parameter to 1 mail.php and 2 mailbar.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" permissions, to inject arbitrary web script or HTML via a Newsletter category field...

CVE-2008-5996

Cross-site scripting XSS vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" permissions, to inject arbitrary web script or HTML via a Newsletter category field...

CVE-2008-5996

Cross-site scripting XSS vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" permissions, to inject arbitrary web script or HTML via a Newsletter category field...

CVE-2008-5996: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" permissions, to inject arbitrary web script or HTML via a Newsletter category field...

Simple PHP Newsletter 1.5 Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Simple PHP Newsletter 1.5 olang Local File Inclusion Vulnerabilities ====================================================================== --:local file include:--...

Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities

No description provided by source. --:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ----------------------------------------------...

Simple PHP NewsLetter 1.5 - Local File Inclusion

Simple PHP NewsLetter 1.5 - Local File Inclusion --:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ----------------------------------------------...

Simple PHP NewsLetter 1.5 - Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

phpList 2.10.8 Local File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: phpList Local File inclusion Vendor: http://www.phplist.com Bug: Local File Inclusion Vulnerable Version: 2.10.8 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

phpList <= 2.10.8 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== phpList Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 AmnPardaz Security...

Active Newsletter 4.3 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Newsletter 4.3 Auth Bypass Remote SQL Injection Vulnerability ====================================================================== Tybe:Auth Bypass Remote SQL...

Active Newsletter 4.3 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date: 28.11.2008 Home:...

activenewsletter-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active NewsLetter 4.3 - Authentication Bypass

Active NewsLetter 4.3 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date:...

Active NewsLetter 4.3 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

No description provided by source. -=======================================- Autore: x0r Cms = Absolute Newsletter 6.1 Bug: Insecure Cookie Handling Vulnerability -=======================================- Exploit: javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE A SERIE...

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================================== Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability ============================================================== -=======================================- Autore:...