Lucene search
+L

149 matches found

CVE
CVE
added 2010/03/15 9:0 p.m.52 views

CVE-2009-4706

The CVE-2009-4706 issue is an XSS vulnerability in the TYPO3 Mailform extension prior to version 0.9.24. The affected component is Mailform (extension for TYPO3); the root cause is not specified in the provided documents beyond generic XSS in the extension. Impact per sources is remote arbitrary ...

4.3CVSS5.9AI score0.00862EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2010/03/15 9:0 p.m.19 views

CVE-2009-4706

Cross-site scripting XSS vulnerability in the Mailform mailform extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.00862EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2007/01/31 1:0 a.m.28 views

CVE-2007-0610

Cross-site scripting XSS vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.01146EPSS
SaveExploits0References4
CVE
CVE
added 2001/09/18 4:0 a.m.65 views

CVE-2000-0877

CVE-2000-0877 concerns the MailForm 2.0 product, specifically the mailform.pl CGI script. The vulnerability allows remote attackers to read arbitrary files by supplying a filename in the XX-attach_file parameter, which MailForm then sends to the attacker. The issue directly concerns the confident...

5CVSS7.1AI score0.01562EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2001/09/18 4:0 a.m.18 views

CVE-2000-0877

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attachfile parameter, which MailForm then sends to the attacker...

6.7AI score0.01562EPSS
SaveExploits0References3
NVD
NVD
added 2000/11/14 5:0 a.m.26 views

CVE-2000-0877

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attachfile parameter, which MailForm then sends to the attacker...

5CVSS6.7AI score0.01562EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2000/09/12 12:0 a.m.29 views

Дырка в MailForm (Credit Card)

Не проверяется запрос пользователя, что позволяет получить любой файл с сервера, прикрепив его к письму...

0.5AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2000/09/12 12:0 a.m.78 views

Unsafe passing of variables to mailform.pl in MailForm V2.0

Title: Unsafe passing of variables to mailform.pl in MailForm V2.0 For Unix or NT Advisory Author: Karl Hanmore [email protected] Script URL: http://rlaj.com/scripts/mailform Script Author: Ranson Johnson Advisory Released: 11 September 2000 Vendor notified: [email protected] 05 Sept...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2000/04/07 12:0 a.m.32 views

mailform.txt

Advisory: MailForm v1.91 for Windows 95 and NT 4.0 Chopsui-cideMmM The Mad Midget Mafia - http://midgets.box.sk/ ======================================================================= Do not save this with any editor, or vital formatting may be lost. Disclaimer: ============= This document is...

7.4AI score
SaveExploits0
Rows per page
Query Builder