CVE-2006-6786
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/12/2006
Last modified:
19/10/2017
Description
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.
Impact
Base Score 2.0
6.50
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:open_newsletter:open_newsletter:*:*:*:*:*:*:*:* | 2.5 (including) | |
cpe:2.3:a:open_newsletter:open_newsletter:2.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page