Back to search
CVE-2006-2887
Published: Jun 7, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
26127
vdb-entry
x_refsource_OSVDB
http://www.kapda.ir/advisory-340.html
x_refsource_MISC
ADV-2006-2149
vdb-entry
x_refsource_VUPEN
mynewsletter-username-sql-injection(26947)
vdb-entry
x_refsource_XF
26274
vdb-entry
x_refsource_OSVDB
20423
third-party-advisory
x_refsource_SECUNIA
1016229
vdb-entry
x_refsource_SECTRACK
18287
vdb-entry
x_refsource_BID
1054
third-party-advisory
x_refsource_SREASON
20060605 [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now