Vulnerabilities

TI-2006-01638 CVE-2006-1692 · GHSA-f3x8-96pm-f4wq

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2006-04-11 No fix listed

TI-2006-01637 CVE-2006-1691 · GHSA-538h-fc8m-7vq8

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute…

LOW 36

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01447 Published 2006-04-11 No fix listed

TI-2006-01636 CVE-2006-1690 · GHSA-vhpp-8h27-6vc3

Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows…

LOW 33

Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or HTML via the user_name parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0156 Published 2006-04-11 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to…

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute…

Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows…