Security Advisory

CVE-2006-6785

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-12-28 00:00:00

Last updated 2024-08-07 20:42:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability.

← Browse all CVEs View on cve.org ↗