Lucene search
+L

4009 matches found

Cvelist
Cvelist
•added 2009/03/23 7:26 p.m.•37 views

CVE-2009-1047

Cross-site scripting XSS vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail...

5.7AI score0.00845EPSS
SaveExploits0References2
CVE
CVE
•added 2009/03/23 7:26 p.m.•87 views

CVE-2009-1047

CVE-2009-1047 is a Drupal XSS vulnerability in the Send by e-mail module of the Printer, e-mail and PDF versions module. The issue affects Drupal 5.x before 5.x-4.4 and 6.x before 6.x-1.4, enabling remote attackers to inject arbitrary web script or HTML via outbound HTML e-mail. Impact is web ses...

4.3CVSS5.8AI score0.00845EPSS
SaveExploits0References2Affected Software2
Mend
Mend
•added 2009/03/23 7:26 p.m.•10 views

CVE-2009-1047

Cross-site scripting XSS vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail...

6.3CVSS0.00845EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/23 12:00 a.m.•8 views

CVE-2009-1047: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References2
Prion
Prion
•added 2009/03/20 6:30 p.m.•31 views

Design/Logic Flaw

Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API...

5CVSS7.2AI score0.01186EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2009/03/20 6:00 p.m.•9 views

CVE-2009-1037

Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API...

6.9CVSS0.01186EPSS
SaveExploits0References4
CVE
CVE
•added 2009/03/20 6:00 p.m.•73 views

CVE-2009-1037

CVE-2009-1037 affects Drupal’s Send by e-mail module within the "Printer, e-mail and PDF versions" module. The vulnerability concerns the flood control API and allows remote attackers to cause unlimited spam messages via vectors related to flood control behavior. Affected versions are 5.x before ...

5CVSS6.8AI score0.01186EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/20 12:00 a.m.•11 views

CVE-2009-1037: Undefined Security Weakness

Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API...

5CVSS6AI score0.01186EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/27 12:00 a.m.•11 views

CVE-2008-6330: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...

6.5CVSS6.4AI score0.00883EPSS
SaveExploits2References2
myhack58
myhack58
•added 2008/12/25 12:00 a.m.•42 views

Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net

by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...

8.2AI score
SaveExploits0
osv_debian
osv_debian
•added 2008/12/10 12:30 a.m.•8 views

DEBIAN-CVE-2008-4311

The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intended access restrictions by 1 sending messages, related to sendrequestedreply; and possibly 2 receiving messages, related to...

4.6CVSS6.7AI score0.00409EPSS
SaveExploits0References1
NVD
NVD
•added 2008/12/10 12:30 a.m.•22 views

CVE-2008-4311

The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intended access restrictions by 1 sending messages, related to sendrequestedreply; and possibly 2 receiving messages, related to...

4.6CVSS5.9AI score0.00409EPSS
SaveExploits0References17
exploitpack
exploitpack
•added 2008/11/19 12:00 a.m.•40 views

MyTopix 1.3.0 - SQL Injection

MyTopix 1.3.0 - SQL Injection evil = ''; $this - socket = socketcreateAFINET, SOCKSTREAM, SOLTCP; $this - inj = '-1+UNION+SELECT+concatmembersname,0x3a,memberspass+FROM+mymembers+WHERE+membersid=2--'; private function send$packet if!$this - socket $this - socket = socketcreateAFINET, SOCKSTREAM,...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/10/31 12:00 a.m.•42 views

absolutefilesend-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script http://www.xigla.com/afilesend/demo.htm Greetz : Allah ,...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/10/31 12:00 a.m.•33 views

Absolute File Send 1.0 Remote Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/10/30 12:00 a.m.•42 views

Absolute File Send 1.0 - Remote Insecure Cookie Handling

Absolute File Send 1.0 - Remote Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script...

0.2AI score
SaveExploits0
zdt
zdt
•added 2008/10/30 12:00 a.m.•60 views

Absolute File Send 1.0 Remote Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Absolute File Send 1.0 Remote Cookie Handling Vulnerability =========================================================== | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | |...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/10/30 12:00 a.m.•49 views

Absolute File Send 1.0 - Remote Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script http://www.xigla.com/afilesend/demo.htm Greetz : Allah ,...

5.8AI score
SaveExploits0
NVD
NVD
•added 2008/10/10 10:30 a.m.•31 views

CVE-2008-3646

The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...

6.8CVSS6.4AI score0.0108EPSS
SaveExploits0References7
Exploit DB
Exploit DB
•added 2008/09/10 12:00 a.m.•57 views

freebsd/x86 - connect back.send.exit /etc/passwd 112 bytes

freebsd/x86 connect back.send.exit /etc/passwd 112 bytes. Shellcode exploit for freebsdx86 platform CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 connect back.send.exit /etc/passwd 112 bytes This is the FreeBSD version of 0in's shellcode http://milw0rm.com/shellcode/6263 really...

7.4AI score
SaveExploits0
Rows per page
Query Builder