SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php.
References
Configurations
History
21 Nov 2024, 00:09
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html - | |
References | () http://evuln.com/vulns/123/summary.html - | |
References | () http://secunia.com/advisories/19568 - Vendor Advisory | |
References | () http://www.osvdb.org/24445 - | |
References | () http://www.osvdb.org/24905 - | |
References | () http://www.securityfocus.com/bid/17412 - | |
References | () http://www.vupen.com/english/advisories/2006/1270 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/25683 - |
Information
Published : 2006-04-11 10:02
Updated : 2025-04-03 01:03
NVD link : CVE-2006-1691
Mitre link : CVE-2006-1691
CVE.ORG link : CVE-2006-1691
JSON object : View
Products Affected
manic_web
- mwnewsletter
CWE