CVE-2006-2887 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Aspburst	Mynewsletter

Configuration 1 [-]

cpe:2.3:a:aspburst:mynewsletter:1.1.2:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/20423
http://securityreason.com/securityalert/1054
http://securitytracker.com/id?1016229
http://www.kapda.ir/advisory-340.html
http://www.osvdb.org/26127
http://www.osvdb.org/26274
http://www.securityfocus.com/archive/1/436018/100/0/threaded
http://www.securityfocus.com/bid/18287
http://www.vupen.com/english/advisories/2006/2149
https://exchange.xforce.ibmcloud.com/vulnerabilities/26947

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-06-07T10:00:00

Updated: 2024-08-07T18:06:26.965Z

Reserved: 2006-06-07T00:00:00

Link: CVE-2006-2887

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-06-07T10:02:00.000

Modified: 2024-11-21T00:12:19.667

Link: CVE-2006-2887

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-05T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "26127", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26127"}, {"tags": ["x_refsource_MISC"], "url": "http://www.kapda.ir/advisory-340.html"}, {"name": "ADV-2006-2149", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2149"}, {"name": "mynewsletter-username-sql-injection(26947)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947"}, {"name": "26274", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26274"}, {"name": "20423", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20423"}, {"name": "1016229", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016229"}, {"name": "18287", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18287"}, {"name": "1054", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1054"}, {"name": "20060605 [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/436018/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-2887", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "26127", "refsource": "OSVDB", "url": "http://www.osvdb.org/26127"}, {"name": "http://www.kapda.ir/advisory-340.html", "refsource": "MISC", "url": "http://www.kapda.ir/advisory-340.html"}, {"name": "ADV-2006-2149", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2149"}, {"name": "mynewsletter-username-sql-injection(26947)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947"}, {"name": "26274", "refsource": "OSVDB", "url": "http://www.osvdb.org/26274"}, {"name": "20423", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20423"}, {"name": "1016229", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016229"}, {"name": "18287", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18287"}, {"name": "1054", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1054"}, {"name": "20060605 [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/436018/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:06:26.965Z"}, "title": "CVE Program Container", "references": [{"name": "26127", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/26127"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.kapda.ir/advisory-340.html"}, {"name": "ADV-2006-2149", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2149"}, {"name": "mynewsletter-username-sql-injection(26947)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947"}, {"name": "26274", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/26274"}, {"name": "20423", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20423"}, {"name": "1016229", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016229"}, {"name": "18287", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18287"}, {"name": "1054", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1054"}, {"name": "20060605 [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/436018/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2887", "datePublished": "2006-06-07T10:00:00", "dateReserved": "2006-06-07T00:00:00", "dateUpdated": "2024-08-07T18:06:26.965Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aspburst:mynewsletter:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B8B7A49C-D61E-49BD-AF61-3A328E6C9D37", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en myNewsletter 1.1.2 y anteriores versiones lo que permite a atacantes remotos ejecutar comandos arbitrarios a trav\u00e9s del par\u00e1metro UserName en (1) validatelogin.asp o (2) adminlogin.asp."}], "id": "CVE-2006-2887", "lastModified": "2024-11-21T00:12:19.667", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-07T10:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20423"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1054"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016229"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.kapda.ir/advisory-340.html"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/26127"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/26274"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/436018/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/18287"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2149"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20423"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1054"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016229"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.kapda.ir/advisory-340.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/26127"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/26274"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/436018/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/18287"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2149"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26947"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}