SQL Injection in Adbnewssender Project
CVE-2008-6046
SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) opt_in_out.php.inc, (2) confirmation.php.inc, and (3) renewal.php.inc in mailinglist/.
Vulnerability class: SQL Injection
EPSS: 0.010 (60.7th percentile) — read the EPSS interpretation.
Affected products
- Adbnewssender_project Adbnewssender
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)