CVE-2006-6785 | BDVDB-2026-21208 Detail

Description#

The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/2981
http://secunia.com/advisories/23476
http://www.securityfocus.com/bid/21775

Exploit#

https://www.exploit-db.com/exploits/2981

History#

Version 12006-12-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.