Описание
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.
Уязвимые конфигурации
Конфигурация 1Версия до 2.5 (включая)
Одно из
cpe:2.3:a:open_newsletter:open_newsletter:*:*:*:*:*:*:*:*
cpe:2.3:a:open_newsletter:open_newsletter:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.04186
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.
EPSS
Процентиль: 90%
0.04186
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other