Description
SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter.
References
- ADV-2006-1148 vdb-entry
- newsletter-script-sql-injection(25498) vdb-entry
- 17304 vdb-entry
- 24229 vdb-entry
- 20060407 [eVuln] newsletter - sourceworkshop SQL Injection Vulnerability mailing-list
- 19425 third-party-advisory
- http://evuln.com/vulns/107/summary.html