CVE-2016-10997

The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php...

CVE-2016-10997: Cross-Site Request Forgery (CSRF)

The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php...

PT-2019-7790

Name of the Vulnerable Software and Affected Versions beauty-premium theme version 1.0.8 Description The issue concerns a CSRF vulnerability that allows for arbitrary file upload. This is specifically related to the includes/sendmail.php file. Recommendations For beauty-premium theme version 1.0....

dair-media.net XSS vulnerability

Open Bug Bounty ID: OBB-665195 Description| Value ---|--- Affected Website:| dair-media.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-12838

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to SQL Injection via the sql parameter in the dl/dl sendmail.php file. Recommendations For version 8.3, consider restricting access to the dl/dl sendmail.php file until a patch is available, a...

els-productions.com.au XSS vulnerability

Open Bug Bounty ID: OBB-642884 Description| Value ---|--- Affected Website:| els-productions.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

esicia.co.rw XSS vulnerability

Open Bug Bounty ID: OBB-640352 Description| Value ---|--- Affected Website:| esicia.co.rw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7770

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address...

Design/Logic Flaw

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address...

CVE-2018-7770

CVE-2018-7770 affects Schneider Electric U.motion Builder; the vulnerability exists in processing of sendmail.php, allowing an attacker to select arbitrary files to send to any email address. Affected are U.motion Builder versions prior to v1.3.4. Impact is information disclosure via path travers...

PT-2018-18267

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue exists in the processing of sendmail.php, allowing callers to select arbitrary files to send to any email address. Recommendations: For versions prior to 1.3.4...

CVE-2018-7770: Improper Limitation of a Pathname to a Restricted Directory

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address...

offsetdruck-schwarz.de XSS vulnerability

Vulnerable URL: http://www.offsetdruck-schwarz.de/sendmail.php?name=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

WordPress Beauty & Clean 1.0.8 Theme - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

WordPress Theme Beauty & Clean 1.0.8 - Arbitrary File Upload

Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact: [email protected] Version: 1.0.8 may affect newer...

Indexu 5.0/5.3 sendmail.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

ObieWebsite Mini Web Shop 2 sendmail.php PATH_INFO Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23847/info Mini Web Shop is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...

CVE-2009-4023

Summary: CVE-2009-4023 (with CVE-2009-4111) affects the Mail::Send implementation in PEAR Mail’s sendmail.php for the Mail package, version 1.1.14. A crafted $from parameter allows remote attackers to read and write arbitrary files over the network. The vulnerability is classified with base CVSS ...

CVE-2009-4023: Improper Control of Generation of Code

Argument injection vulnerability in the sendmail implementation of the Mail::Send method Mail/sendmail.php in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111...