CVE-2024-33297

CVE-2024-33297 Stored Cross Site Scripting-Schwachstelle in Microweber = 2.0.9 Zusammenfassung : Eine Stored Cross Site Scripting-Schwachstelle in Microweber v.2.0.9 ermöglicht es einem entfernten Angreifer, beliebigen Code über das Feld „Kampagnenname Interner Name“ in der Funktion „Neue Kampagn...

Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)

More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...

Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)

More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

EUVD-2007-5434

Malware in sbrugna...

EUVD-2022-3919

Malicious code in bioql PyPI...

EUVD-2023-51435

Malicious code in bioql PyPI...

EUVD-2022-53206

Malicious code in bioql PyPI...

CVE-2025-48308 WordPress Newsletter subscription optin module plugin <= 1.2.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in nonletter Newsletter subscription optin module newsletter-subscription-widget-for-sendblaster allows Stored XSS.This issue affects Newsletter subscription optin module: from n/a through = 1.2.9...

Exploit for Cross-site Scripting in Microweber

CVE-2024-33297 Stored Cross Site Scripting vulnerability in Mi...

CVE-2024-33275: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

CVE-2024-33275

A SQL injection vulnerability (CWE-89) exists in the Webbax supernewsletter module (versions v.1.4.21 and before ) for the PrestaShop e-commerce solution. The flaw originates within the product_search.php component, which allows a remote attacker to escalate privileges . To remediate this, users ...

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

PT-2022-25844 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: A SQL injection issue was found in the Newsletter Custom Popup module of OpenCart. The vulnerability can be exploited via the email parameter at the "index.php?route=extension/module/so newletter custom...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

Sql injection

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

CVE-2022-31856 affects Newsletter Module v3.x with a SQL injection in the zemez_newsletter_email parameter at /index.php. Root cause is improper handling of this input, enabling unauthenticated network-exposed injection with high/critical impact on confidentiality, integrity, and availability (CV...