Improper access control

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

CVE-2008-5606

CVE-2008-5606 affects Gazatem QMail Mailing List Manager 1.2. The issue is insufficient access control: sensitive data is stored under the web root, allowing remote attackers to download the database file qmail.mdb via a direct request. The Connected documents do not provide additional technical ...

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

QMail Mailing List Manager 1.2 Database Disclosure

QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1.2 Download :...

QMail Mailing List Manager 1.2 Database Disclosure Vulnerability

No description provided by source. QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1....

QMail Mailing List Manager 1.2 - Database Disclosure

QMail Mailing List Manager 1.2 - Database Disclosure QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail...

QMail Mailing List Manager 1.2 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ QMail Mailing List Manager 1.2 Database Disclosure Vulnerability ================================================================ QMail Mailing List Manager 1.2 qmail.mdb...

QMail Mailing List Manager 1.2 - Database Disclosure

QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1.2 Download :...

ocean12ml-sqlxssdisclose.txt

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Ocean12 Mailing List Manager Gold DD/SQL/XSS Vulnerabilities ==============================================================...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS...

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected]...

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to...

ocean12mlmg-sql.txt

Application: Ocean12 Mailing List Manager Gold Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 Mailing List Manager Gold SQL Injection vulnerability Exploitation: Remote Google Dork: "Maintained with the Ocean12 Mailing List Manager Gold" Example...

Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection

source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or explo...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.3.0 and all versions below Vulnerability Type: Cross-Site...

CVE-2008-3622

Cross-site scripting XSS vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection."...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Code Execution. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.2.0 and all versions below Vulnerability Type: Code execution...

Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...