Newsletter SQL注入漏洞

Newsletter is a one-click bulk email solution. A security vulnerability exists in the Newsletter v3.x series of releases that stems from a security issue with the zemeznewsletteremail parameter...

CVE-2008-4625

SQL injection vulnerability in stnliframe.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683...

CVE-2008-4625: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in stnliframe.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683...

CVE-2008-0683: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

CVE-2007-5458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...