Mailing List Manager Pro 3.0 - SQL Injection

Mailing List Manager Pro 3.0 - SQL Injection Exploit Title: Mailing List Manager Pro 3.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.vote-pro.com/ Software Link: http://www.mailing-manager.com/demo.html Demo: http://www.mailing-manager.com/demo-gold/ Version: 3.0...

Mailing List Manager Pro 3.0 - SQL Injection

Exploit Title: Mailing List Manager Pro 3.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.vote-pro.com/ Software Link: http://www.mailing-manager.com/demo.html Demo: http://www.mailing-manager.com/demo-gold/ Version: 3.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

CVE-2017-15967

Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...

CVE-2017-15967

Affected software and vulnerability details (CVE-2017-15967) : Mailing List Manager Pro 3.0 is affected by an SQL Injection vulnerability. The issue is exploitable via the edit parameter in two endpoints: admin/users (when sort=login) and admin/template. Public PoCs/exploit references show crafte...