Description
SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php.
References
- mwnewsletter-unsubscribe-sql-injection(25683) vdb-entry
- 19568 third-party-advisory
- ADV-2006-1270 vdb-entry
- 17412 vdb-entry
- 24905 vdb-entry
- 20060421 [eVuln] MWNewsletter SQL Injection and XSS Vulnerabilities mailing-list
- http://evuln.com/vulns/123/summary.html
- 24445 vdb-entry