CVE-2006-2887

ALTO 7.5CVE-2006-2887 · Published 07/06/2006 · updated 16/06/2026

In breve

CVE-2006-2887 è una vulnerabilità ALTO (CVSS 7.5) che riguarda mynewsletter (aspburst).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.3%, superiore al 83.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mynewsletter aspburst	`= 1.1.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.

References

secunia.com/advisories/20423 · Vendor Advisory
securityreason.com/securityalert/1054
securitytracker.com/id
kapda.ir/advisory-340.html · Exploit
osvdb.org/26127
osvdb.org/26274
securityfocus.com/archive/1/436018/100/0/threaded
securityfocus.com/bid/18287 · Exploit
vupen.com/english/advisories/2006/2149
exchange.xforce.ibmcloud.com/vulnerabilities/26947

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free