15633 matches found
PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...
Phenix 3.5b - SQL Injection Vulnerability
No description provided by source. Dear Sir / Madam The ItSecTeam has discovered a new Multiple bug in phenix Lastest Version 35b and will be glad to report and public it . More information about this bug is listed below :...
Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion
No description provided by source. Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...
elitecms 1.01 (sql/xss) Multiple Vulnerabilities
No description provided by source. eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to daganarus, dearest of all my friends. SQL injection requires magicquotes = off -/includes/functions.php --------------------------------- 89. function getpagesettings ... 92. $query = SELECT FROM...
Mail Manager Pro - CSRF (Change Admin Password)
No description provided by source. ----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Merak Mail Server 7.4.5 settings.html Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site scripting vulnerabilities - An HTML injection vulnerabili...
Merak Mail Server 7.4.5 calendar.html schedule Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site scripting vulnerabilities - An HTML injection vulnerabili...
Stadtaus.Com PHP Form Mail Script 2.3 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12735/info PHP Form Mail Script is prone to remote file include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server...
IBM Proventia Network Mail Security System 2.5 POST File Read
No description provided by source. !/usr/bin/python ''' Author: muts of Offensive Security Product: IBM ISS Proventia Mail Security Version: 2.5 Vendor Site: http://www.ibm.com/us/en/ Product Page: http://www-935.ibm.com/services/us/en/it-services/proventia-network-mail-security-system.html...
IRIX 5.3/6.x mail Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1542/info The mail1 program, also know as mailatt, is used to read or send email. A buffer overflow condition exists in code that handles the LOGNAME environment variable. This could be exploited to elevate privileges. /...
E-Mail Security Virtual Appliance learn-msg.cgi Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Biz Mail Form 2.x Unauthorized Mail Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If successfu...
Eureka Email 2.2q ERR Remote Buffer Overflow Exploit
No description provided by source. $Id: eurekamailerr.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
FloosieTek FTGatePro 1.22 Mail Server Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web...
QwikMail 0.3 HELO Command Buffer Overflow Vulnerability
No description provided by source. source: www.securityfocus.com/bid/11989/info QwikMail qwik-smtpd is reported prone to a remotely exploitable buffer overflow vulnerability. The issue is due to insufficient bounds checking of client-supplied SMTP HELO request data. This issue could theoretically...
Uebimiau Web-Mail <= 3.2.0-1.8 - Remote File / Overwrite Vulnerabilities
No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...
VisNetic Mail Server 8.3.5 - Multiple File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19002/info VisNetic Mail Server is prone to multiple local file-include vulnerabilities and a remote file includes vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied...
@Mail 5.42 and @Mail WebMail 5.0.5 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30992/info @Mail and @Mail WebMail are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute...