Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2024-39657
Disclosure Date: August 26, 2024 (last updated September 19, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce: from n/a through 2.6.18.
0
Attacker Value
Unknown
CVE-2024-43126
Disclosure Date: August 12, 2024 (last updated August 13, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce allows Reflected XSS.This issue affects Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce: from n/a through 2.6.14.
0
Attacker Value
Unknown
CVE-2020-23043
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file.
0
Attacker Value
Unknown
CVE-2020-7627
Disclosure Date: April 02, 2020 (last updated February 21, 2025)
node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute()' function.
0
Attacker Value
Unknown
CVE-2009-2449
Disclosure Date: July 13, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter.
0
Attacker Value
Unknown
CVE-2009-2444
Disclosure Date: July 13, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php.
0
Attacker Value
Unknown
CVE-2008-6047
Disclosure Date: February 04, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) subscribing and (2) unsubscribing.
0
Attacker Value
Unknown
CVE-2008-6046
Disclosure Date: February 04, 2009 (last updated October 04, 2023)
SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) opt_in_out.php.inc, (2) confirmation.php.inc, and (3) renewal.php.inc in mailinglist/.
0
