critical10.0Public exploit code
CVE-2007-2371
admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities2007-04-05 · webapps · php · Verified
Impact
admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote attackers to cause a denial of service (loss of configuration data), and possibly perform direct static code injection, via a saveGlobalconfig action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gregory Kokanosky | Phpmynewsletter | through 0.8_beta_5 |