CVE-2015-20121 RealtyScript 4.0.2 SQL Injection via u_id and agent Parameters

Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code through the GET parameter 'uid' in /admin/users.php and the POST parameter 'agent' in /admin/mailer.php. Attackers can...

EUVD-2007-5944

Malware in sbrugna...

EUVD-2007-5882

Malware in sbrugna...

CVE-2020-9364: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactformupload parameter. An attacker could exploit this...

touchinski.nl XSS vulnerability

Open Bug Bounty ID: OBB-620501 Description| Value ---|--- Affected Website:| touchinski.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

inesmedia.de XSS vulnerability

Open Bug Bounty ID: OBB-619837 Description| Value ---|--- Affected Website:| inesmedia.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vsmp.ch XSS vulnerability

Open Bug Bounty ID: OBB-619828 Description| Value ---|--- Affected Website:| vsmp.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

heimatverein-nieukerk.de XSS vulnerability

Open Bug Bounty ID: OBB-581719 Description| Value ---|--- Affected Website:| heimatverein-nieukerk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

1951.staatssymbole.de XSS vulnerability

Open Bug Bounty ID: OBB-575154 Description| Value ---|--- Affected Website:| 1951.staatssymbole.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHPKit 1.6.1 - 'mailer.php' SQL Injection

Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS...

CVE-2007-5974

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

Sql injection

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

CVE-2007-5974

CVE-2007-5974 is an SQL injection vulnerability in the mailer.php component of JPortal 2, enabling remote attackers to manipulate the database via the to parameter. The NVD/NVD-derived entries confirm the affected software (JPortal 2) and the vulnerable parameter, with base severity HIGH (CVSS 2....

CVE-2007-5974: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

CVE-2007-5974

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

Sql injection

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

CVE-2007-5912

The CVE-2007-5912 issue is a SQL injection vulnerability in mailer.php of jPORTAL 2, exploitable via the to parameter to allow remote execution of arbitrary SQL commands. Connected sources confirm the affected component and the root cause as an input-based SQL injection; no public fix version or ...

CVE-2007-5912

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

CVE-2007-5912: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

jportal2-sql.txt

Tytul: jPORTAL 2 Remote SQL Injection Vulnerability dork: intext:"jPORTAL 2" & inurl:"mailer.php" Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad: mailer.php?to=999999999999'+union+select+0,1,2,3,4,5,concatnick,char58,pass,7+from+admins+limit+1/ po...