Lucene search
+L

31 matches found

CVE
CVE
added 2014/04/21 10:00 p.m.72 views

CVE-2014-2921

CVE-2014-2921 affects Pimcore’s Newsletter tool. The vulnerability in the getObjectByToken function (Newsletter.php) occurs in Pimcore versions 1.4.9–2.0.0 and stems from improper handling of an object obtained by unserializing Lucene search data, enabling PHP object injection and arbitrary code ...

7.5CVSS8AI score0.07315EPSS
SaveExploits3References3Affected Software1
zdt
zdt
added 2010/05/28 12:00 a.m.30 views

S.A.R.L EL-MITHAK => Newsletter.php Xss & SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== S.A.R.L EL-MITHAK = Newsletter.php Xss & SQL Injection Vulnerability ===================================================================== Title: S.A.R.L EL-MITHAK...

7.1AI score
SaveExploits0
Prion
Prion
added 2010/05/06 6:30 p.m.15 views

Sql injection

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

7.5CVSS9.1AI score0.0199EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2010/05/06 6:00 p.m.53 views

CVE-2010-1740

GuppY CRM is affected: v4.5.18 contains an SQL injection in newsletter.php where the lng parameter is unsafely used, allowing a remote attacker to execute arbitrary SQL commands. No remediation or exploit specifics are provided in the supplied documents.

7.5CVSS8.7AI score0.0199EPSS
SaveExploits2References4Affected Software1
Exploit DB
Exploit DB
added 2010/05/02 12:00 a.m.39 views

GuppY 4.5.18 - Blind SQL Injection / XPath Injection

======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug ...

7.5CVSS5.8AI score0.0199EPSS
SaveExploits2
Cvelist
Cvelist
added 2007/06/01 1:00 a.m.29 views

CVE-2007-2969

PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter...

7.5AI score0.61727EPSS
SaveExploits3References3
zdt
zdt
added 2007/05/28 12:00 a.m.26 views

WAnewsletter <= 2.1.3 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= WAnewsletter = 2.1.3 Remote File Inclusion Vulnerability ========================================================= ======================= S==A==U==D==I ========================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/05/28 12:00 a.m.40 views

wanewsletter 2.1.3 - Remote File Inclusion

wanewsletter 2.1.3 - Remote File Inclusion ======================= S==A==U==D==I ======================== WAnewsletter-2.1.3 newsletter.php RFI Vul ============================================================== Found By : Mogatil , [email protected]...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/05/28 12:00 a.m.37 views

wanewsletter 2.1.3 - Remote File Inclusion

======================= S==A==U==D==I ======================== WAnewsletter-2.1.3 newsletter.php RFI Vul ============================================================== Found By : Mogatil , [email protected] ============================================================== Script Site :...

7.5CVSS5.8AI score0.61727EPSS
SaveExploits3
Prion
Prion
added 2006/03/30 11:02 a.m.23 views

Sql injection

SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter...

7.5CVSS9AI score0.01381EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2006/03/30 11:00 a.m.37 views

CVE-2006-1533

SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter...

8.4AI score0.01381EPSS
SaveExploits0References7
Rows per page
Query Builder