CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

CVE-2025-32166: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John Housholder Emma for WordPress emma-emarketing-plugin allows Stored XSS.This issue affects Emma for WordPress: from n/a through = 1.3.3...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

The Tikit (now Advanced) eMarketing platform version 6.8.3.0 is vulnerable to a Directory Traversal (Local File Inclusion) issue. The root cause is a lack of validation on the filename parameter within the OpenLogFile endpoint. This allows an unauthenticated remote attacker to read arbitrary file...

Malicious code in emarketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f26ba47ee76e403db00492179895522064a2d6ba8f77a14d05562a0491ea35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2711 Malicious code in emarketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f26ba47ee76e403db00492179895522064a2d6ba8f77a14d05562a0491ea35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Yahoo eMarketing Bug Bounty #31 - Cross Site Vulnerability

Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...