Vulnerabilities > Webinsta

DATE CVE VULNERABILITY TITLE RISK
2011-09-24 CVE-2011-3816 Information Exposure vulnerability in Webinsta Mailing List Manager 1.3E
WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/install3.php and certain other files.
network
low complexity
webinsta CWE-200
5.0
2007-04-24 CVE-2007-2181 Remote File Include vulnerability in WEBinsta FM Manager Admin Cookies
PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter, a different product and vector than CVE-2005-0748.
network
webinsta
6.8
2006-08-17 CVE-2006-4217 Remote Security vulnerability in Webinsta Cms
PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the module_dir parameter, a different vulnerability than CVE-2006-4196.
network
low complexity
webinsta
7.5
2006-08-17 CVE-2006-4196 Remote File Include vulnerability in WEBinsta CMS Templates_Dir
PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter.
network
low complexity
webinsta
7.5
2005-03-10 CVE-2005-0748 Code Injection vulnerability in Webinsta Mailing Manager 1.3D
PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.
network
low complexity
webinsta CWE-94
7.5