VYPR
← All advisories
Unrated severityNVD Advisory· Published May 26, 2006· Updated Jun 16, 2026

CVE-2006-2609

CVE-2006-2609

Description

artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletter_log.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

2
  • Artmedic Webdesign/newsletter2 versions
    cpe:2.3:a:artmedic_webdesign:artmedic_newsletter:4.1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:artmedic_webdesign:artmedic_newsletter:4.1.2:*:*:*:*:*:*:*
    • (no CPE)range: <=4.1.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.