2599 matches found
CVE-2015-7341
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...
PT-2020-7886
Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows SQL injection via several fields, including upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. Recommendations: For version...
PT-2020-7885
Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows for arbitrary file upload, which can be achieved via Subscribers or Templates. This is demonstrated by the ability to upload files with the .php5 extension...
CVE-2015-7341: Unrestricted Upload of File with Dangerous Type
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
Popular YouTube gaming channel hacked to run crypto scam
By Deeba Ahmed The highly popular YouTube gaming channel boasting of 1.88 million subscribers, was hacked over the weekend by unidentified crypto scammers. This is a post from HackRead.com Read the original post: Popular YouTube gaming channel hacked to run crypto scam...
CVE-2012-2724
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page...
CVE-2019-20361
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability...
CVE-2019-20361
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability...
CVE-2019-20361
CVE-2019-20361 affects the WordPress plugin Email Subscribers & Newsletters (before 4.3.1). A blind, time-based SQL injection exists via the hash parameter, enabling SQL statements to be passed to the database. Public disclosures and PoCs exist (e.g., Exploit-DB 48699, Metasploit module for a Wor...
CVE-2019-20361
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability...
PT-2020-10397 · Unknown · Email Subscribers & Newsletters
Name of the Vulnerable Software and Affected Versions: Email Subscribers & Newsletters versions prior to 4.3.1 Description: The issue is related to a blind SQL injection vulnerability. It allowed SQL statements to be passed to the database in the hash parameter. Recommendations: For versions prio...
CVE-2019-20361
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability. Recent assessments: h00die at January 20, 2021 1:48am UTC reported: A blind, time based SQL...
WordPress Email Subscribers & Newsletters SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers & Newsletters is an email subscription and newsletter plugin used in it. An SQL injection vulnerability exists in Ema...
CVE-2019-20361: Improper Neutralization of Special Elements used in an SQL Command
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability...
WordPress Email Subscribers Plugin < 4.2.3 Multiple Vulnerabilities
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Happy 10th Birthday, KrebsOnSecurity.com
Today marks the 10th anniversary of KrebsOnSecurity.com! Over the past decade, the site has featured more than 1,800 stories focusing mainly on cybercrime, computer security and user privacy concerns. And what a decade it has been. Stories here have exposed countless scams, data breaches,...
CVE-2019-19982
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send a /wp-admin/admin-post.php?esskip=1&optionname= request...
CVE-2019-19980
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wpajax...