Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) subscribing and (2) unsubscribing.
Search vulnerabilities
CVE-2008-6047
CVSS 2.0 · 4.3 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2009-2444
Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php.
CVSS 2.0 · 7.5 High
EPSS 1.9%
KEV · Not listed
Vendors
Products
CVE-2009-2449
Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter.
CVSS 2.0 · 7.5 High
EPSS 1.6%
KEV · Not listed
Vendors
Products
Page 1 of 1.