admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2006/CVE-2006-1237.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

756 B
Raw Blame History

CVE-2006-1237

Description

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.

POC

Reference

Github

No PoCs found on GitHub currently.