EUVD-2013-1446

Malware in sbrugna...

CVE-2018-20853

Technical details for CVE-2018-20853 are not publicly available in the provided documents. Monitor for updates from vendor and security advisories.

WordPress Wysija-Newsletters 2.10.2 Database Disclosure

Exploit Title : WordPress Wysija-Newsletters 2.10.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : mailpoet.com wordpress.org/plugins/wysija-newsletters/ Software Download Link :...

WordPress Wysija Newsletters Plugin <= 2.1.6 - Cross Site Scripting

This plugin is prone to swfupload cross site scripting vulnerability. Solution Update the plugin...

CVE-2014-4726

CVE-2014-4726 concerns the WordPress MailPoet Newsletters (wysija-newsletters) plugin, affected through versions prior to 2.6.8. The available connected documents confirm an unspecified vulnerability in this plugin with undefined impact and attack vectors; no concrete exploitation details are pro...

Wordpress MailPoet (wysija-newsletters) Unauthenticated File Upload

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::HTTP::Wordpress include...

Wordpress MailPoet (wysija-newsletters) Unauthenticated File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress MailPoet wysija-newsletters Unauthenticated File Upload', 'Description' = %q The Wordpress plugin "MailPoet Newsletters"...

Wordpress MailPoet (wysija-newsletters) Unauthenticated file Upload

The Wordpress plugin "MailPoet Newsletters" wysija-newsletters before 2.6.7 is vulnerable to an unauthenticated file upload. The exploits uses the upload Theme functionality to upload a zip file containing the payload. The plugin used the admininit hook without knowning the hook is also executed...

Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload

The Wordpress plugin "MailPoet Newsletters" wysija-newsletters before 2.6.8 is vulnerable to an unauthenticated file upload. The exploit uses the Upload Theme functionality to upload a zip file containing the payload. The plugin uses the admininit hook, which is also executed for unauthenticated...

CVE-2013-1408

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the 1 search or 2 orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote...

Sql injection

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the 1 search or 2 orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote...

CVE-2013-1408

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the 1 search or 2 orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote...

CVE-2013-1408

CVE-2013-1408 affects the Wysija Newsletters WordPress plugin (versions up to 2.2.0, i.e., before 2.2.1). The vulnerability stems from SQL injection in the handling of the GET parameters “search” and “orderby” to /wp-admin/admin.php, which can be exploited by a remote authenticated administrator ...

SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin

Advisory ID: HTB23140 Product: Wysija Newsletters WordPress plugin Vendor: Wysija Vulnerable Versions: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: January 16, 2013 Vendor Patch: January 18, 2013 Public Disclosure: February 6, 2013 Vulnerability Type: SQL Injection CWE-89 CVE...

WordPress Wysija Newsletters 2.2 SQL Injection Vulnerability

WordPress Wysija Newsletters plugin version 2.2 suffers from cross site request forgery and remote SQL injection vulnerabilities. Product: Wysija Newsletters WordPress plugin Vendor: Wysija Vulnerable Versions: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: January 16, 2013 Vendo...

WordPress Wysija Newsletters 2.2 SQL Injection

Advisory ID: HTB23140 Product: Wysija Newsletters WordPress plugin Vendor: Wysija Vulnerable Versions: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: January 16, 2013 Vendor Patch: January 18, 2013 Public Disclosure: February 6, 2013 Vulnerability Type: SQL Injection CWE-89 CVE...

WordPress Wysija Newsletters Plugin - Multiple SQL Injection Vulnerabilities

This WordPress Wysija Newsletters plugin is prone to multiple SQL-injection vulnerabilities. An attacker can compromise the application or exploit latent vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Wysija Newsletters - Multiple SQL Injections

WordPress Plugin Wysija Newsletters - Multiple SQL Injections source: https://www.securityfocus.com/bid/57775/info The Wysija Newsletters Plugin for WordPress is prone to multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to compromise the application, access ...

WordPress Plugin Wysija Newsletters - Multiple SQL Injections

source: https://www.securityfocus.com/bid/57775/info The Wysija Newsletters Plugin for WordPress is prone to multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin

High-Tech Bridge Security Research Lab discovered vulnerability in Wysija Newsletters WordPress plugin, which can be exploited to perform SQL Injection attacks. 1 SQL Injections in Wysija Newsletters WordPress plugin: CVE-2013-1408 The vulnerabilities exist due to insufficient filtration of...