MDaemon directory traversal

Directory traversal on mailing list configuration files allows to access files with LocalSystem privileges...

DA Mailing List System 2 - Multiple Vulnerabilities

DA Mailing List System 2 - Multiple Vulnerabilities DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with "admin" as user name and 'or' as password...

DA Mailing List System 2 - Multiple Vulnerabilities

DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with "admin" as user name and 'or' as password...

DA Mailing List System V2 Remote Admin Login Vulnerability

Exploit for unknown platform in category web applications ========================================================== DA Mailing List System V2 Remote Admin Login Vulnerability ========================================================== Dork: DA Mailing List System V2 Powered by DigitalArakan.Net...

CVE-2009-4417

The CVE concerns Zend Framework’s Zend_Log_Writer_Mail shutdown function. Affected component is Zend Framework (ZF) – specifically Zend_Log_Writer_Mail – where the shutdown() path allows context-dependent attackers to cause arbitrary e-mails to be sent to any recipient via vectors related to “eve...

Secunia Research: Winamp Ultratracker File Parsing Buffer Overflow

====================================================================== Secunia Research 17/12/2009 - Winamp Ultratracker File Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

[SECURITY] [DSA 1952-2] End-of-life announcement for asterisk in oldstable

------------------------------------------------------------------------ Debian Security Advisory DSA-1952-2 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

Chipmunk NewsLetter - Cross-Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

CVE-2009-4066

Multiple cross-site request forgery CSRF vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to 1 subscribing or 2 unsubscribing to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to 1 subscribing or 2 unsubscribing to...

CVE-2009-4066

Multiple cross-site request forgery CSRF vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to 1 subscribing or 2 unsubscribing to...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search solr, Random Images maagrandomimage, Flagbit Filebase fbfilebase, freeCap CAPTCHA srfreecap Release Date: Oktober 20, 2009 Please read first: This Collective Security Bulletin CSB is a listin...

PHP Email Manager - 'remove.php?ID' SQL Injection

===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html Dork:-PHPEmailManager Found by :- MuShTaQ from :-...

PHP Email Manager (remove.php ID) SQL Injection Vulnerability

No description provided by source. ===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Remote SQL Injection Vulnerability...

Another Linux Kernel Flaw Emerges

Researchers have identified a new vulnerability in the Linux kernel which could enable an attacker to take complete control of a vulnerable system. The flaw is in all versions of the 2.4 and 2.6 Linux kernels. The Linux kernel vulnerability is a NULL pointer dereference vulnerability that derives...

CVE-2009-2449

Directory traversal vulnerability in maillinglist/admin/changeconfig.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter...

CVE-2009-2449

CVE-2009-2449 describes a directory traversal vulnerability in ADbNewsSender prior to 1.5.6, affecting maillinglist/admin/change_config.php. An attacker can use a .. (dot dot) in the path_to_lang parameter to cause the application to include and execute arbitrary local files. This leads to potent...

CVE-2009-2444

The CVE-2009-2444 vulnerability affects ADbNewsSender and allows directory traversal through path_to_lang in setup/index.php, enabling remote inclusion and execution of local files. Affected versions are ADbNewsSender before 1.5.6 and 2.0 before RC2. The CVSS2 base score is 7.5 (HIGH) with NETWOR...

Acajoom Component for Joomla! <= 3.2.6 Backdoor Detection

Acajoom, a third-party component for Joomla! for managing mailing lists, newsletters, auto-responders, and other communications, is running on the remote host. This version of Acajoom is equal or prior to 3.2.6. It is, therefore, affected by a backdoor in the self.acajoom.php script. An...

Cross-Site Scripting vulnerability in extension Modern Guestbook / Commenting System (ve_guestbook)

It has been discovered that the extension Modern Guestbook / Commenting system veguestbook is vulnerable to Cross-Site Scripting. Release Date: June 16, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.7.1 and...