Vulnerability in Open Newsletter

CVE-2006-6786

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

Open_newsletter — versions 2.0
N/a — versions n/a

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)