CVE-2006-6785

The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to…

published December 28, 2006

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04347 · 91.1th percentile
Published
2006-12-28T00:00Z
EPSS history
Timeline
  • 28 DEC 00:00Z
    The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to…
    cvelistv5