• info
• discussion
• exploit
• solution
• references

xNewsletter Form Field Input Validation Vulnerability

The following example was submitted:

Subscribe with the following code to create an almost undeletable
entry:
<?php inlcude("text.txt");?>testmail@localhost.de

Subscribe with the following address to add an address more than one time:
(testmail@localhost.de)%testmail@localhost.de%testmail@localhost.de%testmail@localhost.de