CVE-2006-6786

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2006-12-28

Last modified

2024-08-07

Affected products

• Open Newsletter (Open Newsletter)

References

• http://www.securityfocus.com/bid/21775
• https://www.exploit-db.com/exploits/2981