CVE

CVE-2006-6786

Severity:

Pending analysis

Type:

Unavailable / Other

Publication date:

28/12/2006

Last modified:

19/10/2017

Description

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.

Impact

Vector 2.0

AV:N/AC:L/Au:S/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 6.50 MEDIUM
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical