← Back

Open Newsletter

open_newsletter

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Open Newsletter
open_newsletter
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-6301
1Open Newsletter
1Open Newsletter
Apr 23, 2026
Dec 10, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.
CVE-2006-6786
1Open Newsletter
1Open Newsletter
Apr 23, 2026
Dec 28, 2006
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.
CVE-2006-6785
1Open Newsletter
1Open Newsletter
Apr 23, 2026
Dec 28, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbi...Show more
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.Show less