Unrated severityNVD Advisory· Published Jun 7, 2006· Updated Apr 16, 2026
CVE-2006-2887
CVE-2006-2887
Description
Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.
Affected products
1- cpe:2.3:a:aspburst:mynewsletter:1.1.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.kapda.ir/advisory-340.htmlnvdExploitVendor Advisory
- www.securityfocus.com/bid/18287nvdExploit
- secunia.com/advisories/20423nvdVendor Advisory
- securityreason.com/securityalert/1054nvd
- securitytracker.com/idnvd
- www.osvdb.org/26127nvd
- www.osvdb.org/26274nvd
- www.securityfocus.com/archive/1/436018/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2149nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26947nvd
News mentions
0No linked articles in our index yet.