← Back

Mailist

mailist

Vendor: Ninjadesigns • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0571
1Ninjadesigns
1Mailist
Apr 23, 2026
Feb 13, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the b...Show more
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory.Show less
CVE-2009-0570
1Ninjadesigns
1Mailist
Apr 23, 2026
Feb 13, 2009
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .....Show more
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter. NOTE: some of these details are obtained from third party information.Show less