2057 matches found
CVE-2006-6785
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...
CVE-2006-6786
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to 1 subscribe.php or 2 unsubscribe.php...
CVE-2006-6787
SQL injection vulnerability in admin/adminmailadressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
EUVD-2006-6768
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...
CVE-2006-6785
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...
CVE-2006-6786
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to 1 subscribe.php or 2 unsubscribe.php...
CVE-2006-6787
SQL injection vulnerability in admin/adminmailadressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-6785
CVE-2006-6785 affects Open Newsletter 2.5 and earlier. The (1) settings.php and (2) subscribers.php scripts do not exit after authentication fails, enabling remote attackers to perform unauthorized administrative actions and, in combination with another vulnerability, to execute arbitrary code. A...
CVE-2006-6786
CVE-2006-6786 affects Open Newsletter 2.5 and earlier. The vulnerability enables remote authenticated administrators to execute arbitrary PHP code by inserting code into the email parameter of subscribe.php or unsubscribe.php. This leads to potential code execution with the privileges of the auth...
CVE-2006-6787
CVE-2006-6787 is a SQL injection vulnerability in Newsletter MX 1.0.2 and earlier. The flaw resides in the admin/admin_mail_adressee.asp page, where the ID parameter can be manipulated to cause the application to execute arbitrary SQL commands. Documents provided do not include exploit code or in...
CVE-2006-6786: Undefined Security Weakness
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to 1 subscribe.php or 2 unsubscribe.php...
CVE-2006-6785: Undefined Security Weakness
The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...
CVE-2006-6787: Undefined Security Weakness
SQL injection vulnerability in admin/adminmailadressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /\// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print...
Newsletter MX <= 1.0.2 (ID) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "...
Open Newsletter <= 2.5 Multiple Remote Vulnerabilities Exploit (update)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Open Newsletter = 2. Muliple Vulnerabilities\r\n"; echo "Site: http://www.selfexile.com/projects/opennewsletter/\r\n"; echo "Dork: "This is a Free & Open Source mailing list manager"\r\n"; echo "by...
NewsLetter MX 1.0.2 - ID SQL Injection
NewsLetter MX 1.0.2 - ID SQL Injection !/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "--...
NewsLetter MX 1.0.2 - 'ID' SQL Injection
!/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit;...
open NewsLetter 2.5 - Multiple Vulnerabilities (2)
!/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: None\r\n"; echo " |- Es: php ".$argv0." localhost /opnletter/ 1\r\n\r\n"; echo " 2 - Credential Retrieve\r\n"; echo " |- Related: None\r\n"; echo " |- Es: php...
Knusperleicht NewsLetter Index.PHP远程文件包含漏洞
Knusperleicht NewsLetter是一款基于PHP的新闻管理程序。 Knusperleicht NewsLetter不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"NLPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht NewsLetter 3.5 http://knusperleicht.at/index.php?knuspi=phpecke http://example.com/Script...