VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 28, 2006· Updated Apr 23, 2026

CVE-2006-6786

CVE-2006-6786

Description

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.

Affected products

2
  • Open Newsletter/Open Newsletter2 versions
    cpe:2.3:a:open_newsletter:open_newsletter:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:open_newsletter:open_newsletter:*:*:*:*:*:*:*:*range: <=2.5
    • cpe:2.3:a:open_newsletter:open_newsletter:2.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.