CVE-2006-6786
open newsletter open newsletter: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- open_newsletter:open_newsletter