282 matches found
CVE-2021-24288 AcyMailing < 7.5.0 - Unauthenticated Open Redirect
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim...
CVE-2021-24288: URL Redirection to Untrusted Site
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim...
PT-2021-15827
Name of the Vulnerable Software and Affected Versions AcyMailing affected versions not specified Description The issue arises when subscribing using AcyMailing, where the redirect parameter is not properly sanitized. An attacker can exploit this by turning a POST request into a GET request,...
Acyba AcyMailing 输入验证错误漏洞
Acyba AcyMailing is a suite of newsletter and marketing automation software from the Acyba team in France. AcyMailing suffers from an input validation error vulnerability that stems from the redirect parameter not being cleared correctly when AcyMailing performs a subscription...
AcyMailing < 7.5.0 - Open Redirect
When subscribing using AcyMailing, the "redirect" parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim. When using acymailing to subscribe to a newsletter, you make a POST...
AcyMailing < 7.5.0 - Open Redirect
When subscribing using AcyMailing, the "redirect" parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim. PoC When using acymailing to subscribe to a newsletter, you make a PO...
WordPress AcyMailing SMTP Newsletter plugin <= 7.4.1 - Unauthenticated Open Redirect vulnerability
Unauthenticated Open Redirect vulnerability discovered by Viktor Markopoulos WordPress AcyMailing SMTP Newsletter plugin versions = 7.4.1. Solution Update the WordPress AcyMailing SMTP Newsletter plugin to the latest available version at least 7.5.0...
The vulnerability of the AcyMailing email marketing manager lies in the lack of restrictions on file downloads, allowing attackers to execute arbitrary code.
The vulnerability of the AcyMailing email marketing manager is related to the lack of restrictions on file uploads. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads
Overview Joomla! plugin "AcyMailing" allows an unauthenticated user to upload arbitrary files CWE-434. qw3rTyTy reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Arbitrary PHP code may be executed. Solution...
JVN#56890693: Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads
Joomla! plugin "AcyMailing" allows an unauthenticated user to upload arbitrary files CWE-434. Impact Arbitrary PHP code may be executed. Solution Update the plugin Update the plugin according to the information provided by the developer. Products Affected AcyMailing versions prior to 6.9.2...
Acyba AcyMailing Code Issue Vulnerability
Acyba AcyMailing is a suite of newsletter and marketing automation software from the Acyba team in France. A code issue vulnerability exists in Acyba AcyMailing versions prior to 6.9.2, which arises from improper handling of file uploads and can be exploited by a remote attacker to execute...
acymailing, 6.9.2,Other
acymailing, 6.9.2,Other Update to version 6.9.2 Developer did not inform the VEL team...
CVE-2020-10934
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins...
CVE-2020-10934
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins...
Design/Logic Flaw
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins...
CVE-2020-10934
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins...
CVE-2020-10934
CVE-2020-10934 affects the Joomla! plugin "AcyMailing" prior to version 6.9.2. The root cause is mishandling of file uploads by admins, allowing an attacker to upload arbitrary files (CWE-434) and potentially execute arbitrary PHP code. Affected software: AcyMailing; vulnerable component: file up...
CVE-2020-10934: Unrestricted Upload of File with Dangerous Type
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins...
Joomla! Component ACYMAILING 3.9.0 - Unauthenticated Arbitrary File Upload
Exploit Title: Joomla! ACYMAILING 3.9.0 component - Unauthenticated Arbitrary File Upload Google Dork: inurl:"index.php?option=comacym" Date: 2020-03-16 Exploit Author: qw3rTyTy Vendor Homepage: https://www.acyba.com/ Software Link: https://www.acyba.com/acymailing/download.html Version: v6.9.1...