ino.com XSS vulnerability

Vulnerable URL: https://www.ino.com/email/commentary/sign-up/subscribe.html?mktcode=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 43922 VIP website status:| Yes Check ino.com SS...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution

Exploit Title: Wordpress Plugin MailChimp Subscribe Forms - Remote Code Execution Date: 23-03-2016 Exploit Author: CrashBandicot Google Dork : inurl:/wp-content/plugins/mailchimp-subscribe-sm/ Vendor Homepage: https://fr.wordpress.org/plugins/mailchimp-subscribe-sm/ Tested on: MSWin32 Version: 1....

Paragon Initiative Enterprises: CSRF AT SUBSCRIBE TO LIST

Hello, You Have Subscribe Form At http://paragonie.us11.list-manage2.com/subscribe?u=260ff2c88e0a7e103f01ccd79&id=8ddb8569ca When We Enter Details And Click on Subscribe. We Get Following Request Just Try to Add Email 'MERGE0' And Pass the Request , Attacker can Also send that Form Request to Bur...

WordPress插件Subscribe to Comments本地文件包含漏洞

No description provided by source...

WordPress Plugin Subscribe to Comments Local File Inclusion Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Subscribe To Comments Reloaded is one of the comment subscription plugin. A local file inclusion vulnerability...

WordPress Subscribe To Comments Reloaded Plugin <= 150611 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress plugin Subscribe to Comments 'options-general.php' local file inclusion vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A local file inclusion vulnerability exists in the WordPress plugin Subscribe to Comments 'options-general.php'. Because the...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the sub-component “tool/monitor subscribe” in the Moodle learning management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information due to errors in the subscription process...

tps.su XSS vulnerability

Vulnerable URL:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution Vulnerabilities

Exploit for php platform in category web applications Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution

Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report: https://security.dxw.com/advisories/admin-only-local-file-inclusion-and-arbitrary-code-execution-in-subscribe-to-comments-2-1-2/ CVE: Awaiting...

WordPress Subscribe to Comments Plugin <= 2.1.2 - Local File Inclusion

Because of this vulnerability, administrators can upload PHP files, also, they can perform arbitrary code execution by the same method. Solution Update the plugin...

WordPress MailChimp Subscribe Forms PHP Code Execution

A PHP code execution vulnerability has been reported in Wordpress plugin MailChimp Subscribe Forms. The vulnerability is due to insufficient validation of user-controlled email address when handling subscribe requests. An unauthenticated remote attacker can exploit this vulnerability by sending a...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution Vulnerability

WordPress MailChimp Subscribe Forms plugin version 1.1 suffers from a remote code execution vulnerability. Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/...

WordPress MailChimp Subscribe Forms Plugin 1.1 - Remote Code Execution

MailChimp Subscribe Forms plugin is prone to a remote code execution vulnerability via "email" field. Solution Upgrade the plugin...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution

Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/ Software Link: https://downloads.wordpress.org/plugin/mailchimp-subscribe-sm.1.1.zip Version: 1.1 Tested on:...

WordPress Mail Subscribe List Plugin <= 2.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

Digium Asterisk res_pjsip_pubsub Module SIP SUBSCRIBE Type Confusion Denial of Service (CVE-2014-6609)

A denial of service vulnerability exists in Asterisk Open Source. The vulnerability is due to the way SIP SUBSCRIBE requests with unexpected mixes of headers for a given event package are handled. Remote, unauthenticated attackers could exploit this vulnerability by sending malformed SIP SUBSCRIB...

MailChimp Subscribe Form <= 1.1 - Email Field Remote PHP Code Execution

Remote Code Execution via email field...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...