CVE-2006-1237

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the…

published March 15, 2006

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01896 · 79.5th percentile
Published
2006-03-15T16:00Z
EPSS history
Timeline
  • 15 MAR 16:00Z
    Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the…
    cvelistv5