CVE-2006-1692

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a)…

published April 11, 2006

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name parameter to subscribe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that this was discovered during post-disclosure analysis.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Published
2006-04-11T10:00Z
EPSS history
Timeline
  • 11 APR 10:00Z
    Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a)…
    cvelistv5