Vulnerabilities

TI-2009-02337 CVE-2009-2449 · GHSA-hjjm-r972-jjw7

Directory traversal vulnerability in maillinglist/admin/change_config.php in…

LOW 36

Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01569 Published 2009-07-13 No fix listed CWE-22

TI-2009-02332 CVE-2009-2444 · GHSA-c794-94g7-5hfq

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender…

LOW 37

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01917 Published 2009-07-13 No fix listed CWE-22

TI-2008-05743 CVE-2008-6047 · GHSA-2rf6-jmhm-j8gq

Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) subscribing and (2) unsubscribing.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01017 Published 2009-02-04 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in maillinglist/admin/change_config.php in…

Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender…

Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote…