CVE-2005-2952

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

CVE-2005-2952

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

CVE-2005-2952

The CVE-2005-2952 entry concerns a directory traversal vulnerability in Subscribe Me Pro (versions up to 2.044.09P and earlier). The issue arises from a dot-dot (.. ) path traversal in the l parameter of s.pl, allowing remote attackers to read arbitrary files. Affects Subscribe Me Pro 2.044.09P a...

CVE-2005-2952: Undefined Security Weakness

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

subpro204409P.txt

------=Part56326909740.1126618894612 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline ------------------------------------------------------ HYA-2005-006 h4cky0u.org Advisory 007...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

Subscribe Me Pro 2.44 - S.pl Directory Traversal source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of...

[Full-disclosure] Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability

-------------------------------------------------------------- HYA-2005-006 h4cky0u.org Advisory 007 -------------------------------------------------------------- Date - Tue Sep 13 2005 TITLE: ====== Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability SEVERITY: ========= High...

CVE-2004-2210: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...

Subscribe Me Pro/Enterprise - Remote Code Execution via Backticked Perl Variable Injection.

Pimp industries. "Its all about the Bling, Bitches and Fame!" Subscribe Me Pro/Enterprise All recent versions of Pro/Enterprise Remote Code Execution via Backticked Perl Variable Injection. C Paul Craig Pimp Industries 2003 This advisory is also online at:...

SiteInteractive Subscribe Me - Setup.pl Arbitrary Command Execution

SiteInteractive Subscribe Me - Setup.pl Arbitrary Command Execution source: https://www.securityfocus.com/bid/9253/info It has been reported that the SiteInteractive Subscribe Me setup.pl script lacks sufficient sanitization on user-supplied URI parameters; an attacker may invoke this script...

cnn_unsubscribe_bot.txt

CNN List Un-Subscribe bot Date: 8/22/01 Author: Jay Daniels PROBLEM: Anyone can Un-Subscribe other users from CNN's distribution list by placing a random number at the end of unsubscribe cgi URL's memberid. CAUSE: There is no confirmation request! I can't remember if there is a confirmation reque...

CVE-2001-0086

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...

CVE-2001-0086

CVE-2001-0086 affects CGI Script Center Subscribe Me LITE 2.0 and earlier. The vulnerability allows remote attackers to delete arbitrary mailing-list users by directly calling subscribe.pl with the target address as a parameter, without authentication. The NVD entry notes a CVSS v2 base score of ...

CVE-2001-0086: Undefined Security Weakness

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...

Дырка в Subscribe Me

Любой желающий может удалить адрес из списка рассылки...

Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below.

note : This is not apparent in the commercial versions, tested on three different versions the author was notified and appropriate changes have since been made. product page - http://www.cgiscriptcenter.com/subscribe/index2.html vendor notice - Security Advisory: Users of Subscribe Me Lite 1.0 -...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...

CVE-2000-0688

CVE-2000-0688 concerns Subscribe Me LITE. The vulnerability is that it does not properly authenticate password-change attempts, allowing a remote attacker to gain privileges for the Account Manager by directly invoking subscribe.pl with the setpwd parameter. The available connected documents conf...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...

CVE-2000-0688: Undefined Security Weakness

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...