CVE-2008-7043: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter. NOTE: this can be leveraged to modify cookies and conduct session fixation attacks...

CVE-2008-7042: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmpsid parameter...

AlstraSoft Web Email Script Enterprise SQL Injection

--AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE" --Dork2: AlstraSoft Web Email Script...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5751

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5751

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5751

CVE-2008-5751 is a SQL injection vulnerability in index.php of AlstraSoft Web Email Script Enterprise (ESE). The issue arises from unsafely handling the id parameter in a directory action, allowing remote attackers to inject SQL and execute arbitrary commands against the backend database. This en...

CVE-2008-5751: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

AlstraSoft Web Email Script Enterprise (id) SQL Injection Vuln

No description provided by source. --AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE"...

Alstrasoft Web Email Script Enterprise - id SQL Injection

Alstrasoft Web Email Script Enterprise - id SQL Injection --AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork:...

AlstraSoft Web Email Script Enterprise (id) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== AlstraSoft Web Email Script Enterprise id SQL Injection Vuln ============================================================== --AlstraSoft Web Email Script Enterprise id Remote S...

Alstrasoft Web Email Script Enterprise - 'id' SQL Injection

--AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE" --Dork2: AlstraSoft Web Email Script...

fes-rficookie.txt

+-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founder: Don 6. +-----------------date:...

Fresh Email Script 1.0 Multiple Remote Vulnerabilities

No description provided by source. 1. +-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founde...

fresh email script 1.0 - Multiple Vulnerabilities

+-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founder: Don 6. +-----------------date:...

phpBB 2.0.18 - Remote Brute ForceDictionary (2)

phpBB 2.0.18 - Remote Brute ForceDictionary 2 !/usr/bin/perl Title: PhpBB Note: Host the php script and replace the line 34 Php script for the email option because win32 don't support Mail::Mailer Changelog: Bruteforce option | Starting length | Email option | More fast | Die error disabled |...

phpBB <= 2.0.18 Remote Bruteforce/Dictionary Attack Tool (updated)

No description provided by source. !/usr/bin/perl Title: PhpBB = 2.0.18 Remote Bruteforce/Dictionary Attack Tool Type: Bruteforce / Dictionary attack New demo: http://rapidshare.de/files/13694254/phpbbbtr.avi.html 1.06 mb Php Email Script data: ? mail$destinataire, $objet, $contenu, "From:...

ultimate-bb.txt

I set up a script on some server somewhere that will mail me the contents of "whatever" in a url query as such - http://somehost.com/somescript.php/cgi/pl/asp?contents="whatever" when I have that script in place I post a message on the board that I wish to steal peoples passes from withfor Intern...

Leif M. Wright simplestmail.cgi 1.0 - Remote Command Execution

Leif M. Wright simplestmail.cgi 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/2102/info A vulnerabiliy exists in Leif M. Wright's simplestmail.cgi, a script designed to coordinate email responses from web forms. An insecurely-structured call to the open function leads t...