EUVD-2006-0923

Malware in sbrugna...

ITPison OMICARD EDM 路径遍历漏洞

ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison, China. A security vulnerability exists in ITPison OMICARD EDM, which originates from a path traversal vulnerability in the relay function of the email file. A remote attacker can exploit this...

Oi! Email Marketing System 3.0 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16794/ Oi! Email Marketing System is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Sql injection

SQL injection vulnerability in index.php aka the login page in Oi! Email Marketing System 3.0 aka Oi! 3 allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

CVE-2006-0920

Oi! Email Marketing System 3.0 aka Oi! 3 stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password...

CVE-2006-0919

SQL injection vulnerability in index.php aka the login page in Oi! Email Marketing System 3.0 aka Oi! 3 allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

CVE-2006-0919

SQL injection vulnerability in index.php aka the login page in Oi! Email Marketing System 3.0 aka Oi! 3 allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

CVE-2006-0920

Oi! Email Marketing System 3.0 (Oi! 3) stores the server FTP password in cleartext on a Configuration web page, enabling local superadministrators or anyone with web-page access to view the password. This vulnerability exposes confidential credentials and arises from cleartext password storage on...

CVE-2006-0919

CVE-2006-0919 describes an SQL injection in Oi! Email Marketing System 3.0 (Oi! 3) login flow (index.php) that allows remote attackers to execute arbitrary SQL commands through the Username and Password fields. The vulnerability arises in the login page handling of user input, enabling partial/co...