SuSE9 Security Update : mailman (YOU Patch Number 12224)

This update of mailman fixes a cross-site scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41233;...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

openSUSE Security Update : mailman (mailman-151)

This update of mailman fixes a cross-site-scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mailman-151. The text description of this...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

CVE-2009-2164

CVE-2009-2164 describes SQL injection vulnerabilities in Kjtechforce Mailman beta1, exploitable when magic_quotes_gpc is disabled. The issues allow remote attackers to execute arbitrary SQL via (1) the code parameter in activate.php or (2) the dest parameter in index.php. Affected component is th...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-->

------------------------------------------------------------ SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-- ------------------------------------------------------------ CMS INFORMATION: --WEB: http://sourceforge.net/projects/kjtechforce/ --DOWNLOAD:...

Kjtechforce mailman b1 (dest) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Kjtechforce mailman b1 (code) SQL Injection Delete Row Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Kjtechforce Mailman Beta-1 Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/kjtechforce/ | |--DOWNLOAD: http://sou...

Kjtechforce mailman b1 (dest) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Kjtechforce mailman b1 dest Remote Blind SQL Injection Exploit ================================================================ !/usr/bin/perl...

Kjtechforce mailman b1 - 'dest' Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --------------------------------------------------------------------------------------------- ...

Kjtechforce mailman b1 (code) SQL Injection Delete Row Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Kjtechforce mailman b1 code SQL Injection Delete Row Vulnerability ====================================================================...

Kjtechforce mailman b1 - Delete Row 'code' SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

Kjtechforce mailman b1 - Delete Row code SQL Injection

Kjtechforce mailman b1 - Delete Row code SQL Injection || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Kjtechforce Mailman Beta-1 SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/kjtechforce/ | |--DOWNLOAD: http://sourceforge.net/projects/kjtechforce/ | |--...

FreeBSD : mailman XSS in create script (429249d2-67a7-11d8-80e3-0020ed76ef5a)

From the 2.1.3 release notes : Closed a cross-site scripting exploit in the create cgi script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

FreeBSD : mailman denial-of-service vulnerability in MailCommandHandler (b0e76877-67a8-11d8-80e3-0020ed76ef5a)

A malformed message could cause mailman to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXM...