CVE-2006-2887

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-07 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp.

Affected products

Aspburst Mynewsletter: 1.1.2

References

http://secunia.com/advisories/20423
http://securityreason.com/securityalert/1054
http://securitytracker.com/id?1016229
http://www.kapda.ir/advisory-340.html
http://www.osvdb.org/26127
http://www.osvdb.org/26274
http://www.securityfocus.com/archive/1/436018/100/0/threaded
http://www.securityfocus.com/bid/18287
http://www.vupen.com/english/advisories/2006/2149
https://exchange.xforce.ibmcloud.com/vulnerabilities/26947
http://secunia.com/advisories/20423
http://securityreason.com/securityalert/1054

Get alerted when CVE-2006-2887 or the next vulnerability affects your stack