Lucene search
+L

953 matches found

NVD
NVD
•added 2009/01/27 1:30 a.m.•26 views

CVE-2008-5979

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...

4.3CVSS5.7AI score0.01684EPSS
SaveExploits1References4
NVD
NVD
•added 2009/01/27 1:30 a.m.•29 views

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

5CVSS6.6AI score0.02839EPSS
SaveExploits1References3
Prion
Prion
•added 2009/01/27 1:30 a.m.•21 views

Cross site scripting

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...

4.3CVSS6.1AI score0.01684EPSS
SaveExploits1References4
NVD
NVD
•added 2009/01/27 1:30 a.m.•26 views

CVE-2008-5978

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to 1 default.asp and 2 sedit.asp...

7.5CVSS8.5AI score0.01142EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2009/01/27 1:00 a.m.•36 views

CVE-2008-5979

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...

5.7AI score0.01684EPSS
SaveExploits1References4
CVE
CVE
•added 2009/01/27 1:00 a.m.•63 views

CVE-2008-5978

CVE-2008-5978 affects Ocean12 Mailing List Manager Gold. The vulnerability is a SQL injection in the Email parameter for two pages (default.asp and s_edit.asp), allowing remote attackers to execute arbitrary SQL commands. The issue is caused by unsafely concatenating user input into SQL queries, ...

7.5CVSS8.8AI score0.01142EPSS
SaveExploits3References4Affected Software1
CVE
CVE
•added 2009/01/27 1:00 a.m.•69 views

CVE-2008-5979

CVE-2008-5979 describes a cross-site scripting (XSS) vulnerability in default.asp of Ocean12 Mailing List Manager Gold. The flaw allows remote attackers to inject arbitrary web script or HTML via the Email parameter, enabling potential session hijacking or defacement depending on the context and ...

4.3CVSS5.9AI score0.01684EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2009/01/27 1:00 a.m.•62 views

CVE-2008-5980

CVE-2008-5980 affects Ocean12 Mailing List Manager Gold, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download a database (o12mail.mdb) via a direct request. The provided sources corroborate that the issue is a data exposure d...

5CVSS6.8AI score0.02839EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2009/01/27 1:00 a.m.•35 views

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

6.6AI score0.02839EPSS
SaveExploits1References3
Typo3
Typo3
•added 2009/01/23 12:00 a.m.•102 views

XSS and SQL injection vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to XSS and SQL injections. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.3.0 and all versions below Vulnerability Type: Cross-Site...

6.9AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
•added 2009/01/12 12:00 a.m.•36 views

25 dMx READY Products Database Disclosure

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! O...

7.4AI score
SaveExploits0
Typo3
Typo3
•added 2008/12/22 12:00 a.m.•18 views

TYPO3 Security Bulletin

It has been discovered that the extension WEC Discussion Forum wecdiscussion is vulnerable to Cross-Site Scripting XSS and SQL injection. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.7.0 and all versions below...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2008/12/16 7:07 p.m.•22 views

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

5CVSS6.3AI score0.02615EPSS
SaveExploits1References4
Prion
Prion
•added 2008/12/16 7:07 p.m.•20 views

Improper access control

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

5CVSS6.9AI score0.02615EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2008/12/16 6:00 p.m.•62 views

CVE-2008-5606

CVE-2008-5606 affects Gazatem QMail Mailing List Manager 1.2. The issue is insufficient access control: sensitive data is stored under the web root, allowing remote attackers to download the database file qmail.mdb via a direct request. The Connected documents do not provide additional technical ...

5CVSS6.3AI score0.02615EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2008/12/16 6:00 p.m.•39 views

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

6.3AI score0.02615EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2008/12/09 12:00 a.m.•23 views

QMail Mailing List Manager 1.2 Database Disclosure

QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1.2 Download :...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/12/08 12:00 a.m.•18 views

QMail Mailing List Manager 1.2 Database Disclosure Vulnerability

No description provided by source. QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1....

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/12/07 12:00 a.m.•23 views

QMail Mailing List Manager 1.2 - Database Disclosure

QMail Mailing List Manager 1.2 - Database Disclosure QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail...

7.4AI score
SaveExploits0
zdt
zdt
•added 2008/12/07 12:00 a.m.•32 views

QMail Mailing List Manager 1.2 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ QMail Mailing List Manager 1.2 Database Disclosure Vulnerability ================================================================ QMail Mailing List Manager 1.2 qmail.mdb...

7.1AI score
SaveExploits0
Rows per page
Query Builder