Re: Intel.com Mailing List Arbitrary Address Removal Link

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>While Intel requires you to login to modify account information, it does not 
>require you to login to remove your e-mail (or any e-mail) from its mailing 
>list database.

This issue is valuable for plenty of mailing lists, as example take the GRC mailing list :

Exemple :
http://grc.com/mail.htm
(POST) therefor no direct link here. Enter whatever e-mail address and select "delete membership".
As for moderation, I thought specific vulnerabilities (i.e intel.com is vulnerable to etc) wouldn't be posted.

== 
Thierry Zoller
http://www.sniff-em.com

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux