CVE-2006-2887

Опубликовано: 07 июн. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.

Ссылки

http://secunia.com/advisories/20423
Vendor Advisory
http://securityreason.com/securityalert/1054
http://securitytracker.com/id?1016229
http://www.kapda.ir/advisory-340.html
Exploit
Vendor Advisory
http://www.osvdb.org/26127
http://www.osvdb.org/26274
http://www.securityfocus.com/archive/1/436018/100/0/threaded
http://www.securityfocus.com/bid/18287
Exploit
http://www.vupen.com/english/advisories/2006/2149
https://exchange.xforce.ibmcloud.com/vulnerabilities/26947
http://secunia.com/advisories/20423
Vendor Advisory
http://securityreason.com/securityalert/1054
http://securitytracker.com/id?1016229
http://www.kapda.ir/advisory-340.html
Exploit
Vendor Advisory
http://www.osvdb.org/26127
http://www.osvdb.org/26274
http://www.securityfocus.com/archive/1/436018/100/0/threaded
http://www.securityfocus.com/bid/18287
Exploit
http://www.vupen.com/english/advisories/2006/2149
https://exchange.xforce.ibmcloud.com/vulnerabilities/26947

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aspburst:mynewsletter:1.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06432

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9685-h9vg-h752

github

почти 4 года назад