Lucene search
K

12 matches found

UbuntuCve
UbuntuCve
added 2017/05/04 2:29 p.m.46 views

CVE-2017-8295

WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to...

5.9CVSS6.5AI score0.77097EPSS
Exploits7References3
myhack58
myhack58
added 2012/11/09 12:0 a.m.77 views

MagicMail Mike g & e-mail system XSS and absolute path vulnerability-vulnerability warning-the black bar safety net

This morning in the Black Box testing of the local education network of the time to find a mail system vulnerability Comprising a reflectiveXSS as well as the absolute path to the leak Looked at looks like all is linux. Keywords: Mike g & e-mail system by MagicMail ! You can see a lot of governme...

7AI score
Exploits0
NVD
NVD
added 2009/01/21 6:30 p.m.8 views

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

7.5CVSS8.6AI score0.00485EPSS
Exploits1References4
Prion
Prion
added 2009/01/21 6:30 p.m.9 views

Sql injection

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

7.5CVSS9.4AI score0.00485EPSS
Exploits1References4
Cvelist
Cvelist
added 2009/01/21 6:0 p.m.14 views

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

8.6AI score0.00485EPSS
Exploits1References4
CVE
CVE
added 2009/01/21 6:0 p.m.45 views

CVE-2008-5926

CVE-2008-5926 affects the ASP-DEv Internal E-Mail System, where multiple SQL injection flaws exist in login.asp that allow remote attackers to alter the database by manipulating the login (user) or password fields. The NVD entry reports a base score of 7.5 (HIGH) with network access and LOW attac...

7.5CVSS8.9AI score0.00485EPSS
Exploits1References4Affected Software1
Packet Storm
Packet Storm
added 2008/12/15 12:0 a.m.17 views

ASP-DEV Internal E-Mail System SQL Injection

--------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected] Vulnerability : Auth Bypass SQL Injection Vulnerability...

0.2AI score
Exploits0
seebug.org
seebug.org
added 2008/12/15 12:0 a.m.10 views

ASP-DEV Internal E-Mail System (Auth Bypass) SQL Injection Vuln

No description provided by source. --------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected] Vulnerability : Auth Bypass...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2008/12/14 12:0 a.m.20 views

Internal E-Mail System SQL Injection

--------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected] Vulnerability : Auth Bypass SQL Injection Vulnerability...

0.2AI score
Exploits0
exploitpack
exploitpack
added 2008/12/14 12:0 a.m.11 views

ASP-DEV Internal E-Mail System - Authentication Bypass

ASP-DEV Internal E-Mail System - Authentication Bypass --------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected]...

0.7AI score
Exploits0
0day.today
0day.today
added 2008/12/14 12:0 a.m.16 views

ASP-DEV Internal E-Mail System (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== ASP-DEV Internal E-Mail System Auth Bypass SQL Injection Vuln ===============================================================...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2008/12/14 12:0 a.m.37 views

ASP-DEV Internal E-Mail System - Authentication Bypass

--------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected] Vulnerability : Auth Bypass SQL Injection Vulnerability...

7AI score
Exploits0
Rows per page
Query Builder