QMail Mailing List Manager 1.2 - Database Disclosure

QMail Mailing List Manager 1.2 qmail.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : QMail Mailing List Manager 1.2 Download :...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS...

ocean12ml-sqlxssdisclose.txt

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected]...

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Ocean12 Mailing List Manager Gold DD/SQL/XSS Vulnerabilities ==============================================================...

Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection

source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or explo...

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to...

ocean12mlmg-sql.txt

Application: Ocean12 Mailing List Manager Gold Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 Mailing List Manager Gold SQL Injection vulnerability Exploitation: Remote Google Dork: "Maintained with the Ocean12 Mailing List Manager Gold" Example...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.3.0 and all versions below Vulnerability Type: Cross-Site...

CVE-2008-3622

Cross-site scripting XSS vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection."...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Code Execution. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.2.0 and all versions below Vulnerability Type: Code execution...

Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

hpssd of hplip allows unprivileged user to trigger alert mail

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Lyris ListManager read/search/results words Parameter XSS

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. The version of ListManager installed on the remote host fails to sanitize user input to the 'words' parameter of the 'read/search/results' script before including it in dynamic HTML...

Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

It has been discovered that the extension Frontend User Registration srfeuserregister is susceptible to Cross Site Scripting XSS attacks and allows Remote Command Execution. Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions:...

Sympa Detection

The remote host is running Sympa, an open source mailing list software application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31725; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Sympa Detection...

CVE-2008-1427

SQL injection vulnerability in the Joobi Acajoom comacajoom 1.1.5 and 1.2.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mailingid parameter in a mailing view action to index.php...