15551 matches found
WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02397)
WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Mail Masta Plugin is one of the mail plugin. The Mail Masta Plugin for WordPress suffers from a SQL injection...
Sql injection
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaign/countofsend.php Requires authentication to Wordpress admin with the POST Parameter: campid...
CVE-2017-6097
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaign/countofsend.php Requires authentication to Wordpress admin with the POST Parameter: campid...
CVE-2017-6096
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/view-list.php Requires authentication to Wordpress admin with the GET Parameter: filterlist...
CVE-2017-6098
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaignsave.php Requires authentication to Wordpress admin with the POST Parameter: listid...
CVE-2017-6097
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaign/countofsend.php Requires authentication to Wordpress admin with the POST Parameter: campid...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6096
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/view-list.php Requires authentication to Wordpress admin with the GET Parameter: filterlist...
Sql injection
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaignsave.php Requires authentication to Wordpress admin with the POST Parameter: listid...
Sql injection
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/view-list.php Requires authentication to Wordpress admin with the GET Parameter: filterlist...
Sql injection
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6098
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaignsave.php Requires authentication to Wordpress admin with the POST Parameter: listid...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6097
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaign/countofsend.php Requires authentication to Wordpress admin with the POST Parameter: campid...
CVE-2017-6097
CVE-2017-6097 concerns the WordPress plugin Mail Masta 1.0, which contains multiple SQL injection vulnerabilities. The primary entry notes a vulnerable function in /inc/campaign/count_of_send.php that uses a POST parameter camp_id without sufficient validation (authentication to WordPress admin i...
CVE-2017-6096
CVE-2017-6096 concerns the WordPress Mail Masta 1.0 plugin, with concrete SQL injection flaws reported in multiple vectors. Affects the plugin’s code paths that build SQL using unsanitized input: (1) csvexport.php uses GET parameter list_id without proper filtering, enabling injection via a const...
CVE-2017-6098
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/campaignsave.php Requires authentication to Wordpress admin with the POST Parameter: listid...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6095
The WordPress Mail Masta plugin (v1.0) contains multiple SQL injection flaws documented across several feeds. The primary issue is an unauthenticated SQLi in wp-content/plugins/mail-masta/inc/lists/csvexport.php via the list_id GET parameter, where user input is used without proper filtering in S...
CVE-2017-6096
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/view-list.php Requires authentication to Wordpress admin with the GET Parameter: filterlist...