CVE-2006-2887

Published: Jun 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.

Affected (1)

Products: Aspburst: Mynewsletter

Aspburst

1 product

Mynewsletter

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aspburst Mynewsletter	Version 1.1.2

References (20)

http://secunia.com/advisories/20423

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1054

Source: cve@mitre.org

http://securitytracker.com/id?1016229

Source: cve@mitre.org

http://www.kapda.ir/advisory-340.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/26127

Source: cve@mitre.org

http://www.osvdb.org/26274

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436018/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18287

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/2149

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26947

Source: cve@mitre.org

http://secunia.com/advisories/20423