116 matches found
WordPress Email Users 4.8.3 Cross Site Request Forgery
------------------------------------------------------------------------ Cross-Site Request Forgery vulnerability in Email Users WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...
Webbler CMS 3.1.3 Mail A Friend Open Email Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25045/info The 'webbler' is prone to an open-email-relay vulnerability. An attacker may leverage the issue to use webservers that are hosting the vulnerable software to send arbitrary unsolicited bulk email. Attackers may...
Phorum 3.0.7 violation.php3 Arbitrary Email Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin board style chats...
CVE-2012-4730
Request Tracker RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors...
CVE-2009-4385
Multiple cross-site request forgery CSRF vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to 1 hijack the authentication of arbitrary users for requests that delete polls via the deletepoll action to index.php; and hijack the authentication of administrators for requests...
CVE-2009-4385
Multiple cross-site request forgery CSRF vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to 1 hijack the authentication of arbitrary users for requests that delete polls via the deletepoll action to index.php; and hijack the authentication of administrators for requests...
phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities ================================================================ phpCollegeExchange 0.1.5c Multiple SQL...
Phorum violation.php3转发任意邮件漏洞
BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...
CVE-2007-4073
Webbler CMS is affected up to version 3.1.5 (prior to 3.1.6). The vulnerability arises from insufficient validation of the "+mail a friend+" form, allowing remote attackers to cause the system to send forged emails. The issue is a misuse of an input form rather than a separate exploit channel, en...
CVE-2007-1898
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails spam via modified recipient, SETTINGSallowedemailhosts, and subject parameters...
JVN#08951968 MailDwarf vulnerability allows unauthorized sending of emails
Impact A remote attacker may be able to send unsolicited mails to arbitrary email addresses. Solution Products Affected MailDwarf ver3.01 or earlier...
CVE-2006-7087
CRLF injection vulnerability in the mail function in Dotdeb PHP before 5.2.0 Rev 3 allows remote attackers to bypass the protection scheme and inject arbitrary email headers via CRLF sequences in the query string, which is processed via the PHPSELF variable...
JVN#11048526 mail f/w system vulnerable to allow unauthorized email transmissionk
Impact A remote attacker may exploit this vulnerability to send unsolicited mails to arbitrary email addresses. Solution Products Affected mail f/w system 8.2 and earlier...
Novell GroupWise Windows Client Arbitrary Email Access
The remote host is running GroupWise, an enterprise-class collaboration application from Novell. The version of GroupWise installed on the remote host contains a flaw in the client API that may allow a user to bypass security controls and gain access to non-authorized email within the same...