medium6.5Public exploit code
CVE-2006-6786
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- open NewsLetter 2.5 - Multiple Vulnerabilities (2)2006-12-23 · webapps · php · Verified
Impact
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Newsletter | Open Newsletter | through 2.5 Version 2.0 |