// For flags

CVE-2006-6786

open NewsLetter 2.5 - Multiple Vulnerabilities

Severity Score

6.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.

Open Newsletter 2.5 y anteriores permite a administradores autenticados remotamente ejecutar código PHP de su elección insertando él código en el parámetro email de (1) subscribe.php o (2) unsubscribe.php.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-12-27 CVE Reserved
  • 2006-12-28 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2024-09-02 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (2)
URL Tag Source
URL Date SRC
https://www.exploit-db.com/exploits/2981 2024-08-07
http://www.securityfocus.com/bid/21775 2024-08-07
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Open Newsletter
Search vendor "Open Newsletter"
 Open Newsletter
Search vendor "Open Newsletter" for product "Open Newsletter"
 <= 2.5
Search vendor "Open Newsletter" for product "Open Newsletter" and version " <= 2.5"
-
Affected
Open Newsletter
Search vendor "Open Newsletter"
 Open Newsletter
Search vendor "Open Newsletter" for product "Open Newsletter"
 2.0
Search vendor "Open Newsletter" for product "Open Newsletter" and version "2.0"
-
Affected