Alstrasoft Web Email Script Enterprise - id SQL Injection

Alstrasoft Web Email Script Enterprise - id SQL Injection --AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork:...

Alstrasoft Web Email Script Enterprise - 'id' SQL Injection

--AlstraSoft Web Email Script Enterprise id Remote SQL Injection Vuln. YazarAuth0r: Bgh7 Site: Http://ozelteam.com Turk Bılısım Guclerı PsT: ByBgh7 at msn d0t c0m --Script: http://www.alstrasoft.com/disposable-email-script.htm --Dork: AlstraSoft Web "ESE" --Dork2: AlstraSoft Web Email Script...

Mike's World Mail Machine Mailmachine.CGI本地文件包含漏洞

BUGTRAQ ID: 24852 CNCAN ID:CNCAN-2007071105 Mike's World Mail Machine是一款WEB EMAIL服务程序。 Mike's World Mail Machine不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是mailmachine.cgi脚本中的open函数不正确过滤用户提交的输入，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 Mail Machine Mail Machine 3.989 Mail Machine Ma...

AeroMail multiple vulnerabilities

AeroMail multiple vulnerabilities PROGRAM: AeroMail VENDOR: Mark Cushman [email protected] HOMEPAGE: http://the.cushman.net/projects/aeromail/ MIRROR: http://www.packetplay.com/projects/aeromail/ VULNERABLE VERSIONS: all versions below 1.45 SEVERITY: medium to high DESCRIPTION: "AeroMail is a...

Web-based email services filtering systems vulnerable to malicous script execution

Overview An attacker can send a specially crafted email message to a victim containing malicious scripting JavaScript, VBScript, JScript, etc., or potentially HTML. When a victim views the message with scripting enabled, the victim's browser will then interpret this javascript which can lead to...