nuevoMailer version 6.0 and earlier time-based SQL Injection

Description: SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter. PoC: https://vulnerablesite.com/inc/rdr.php?r=69387c602c1056c556time based SQL INJ...

Sql injection

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

CVE-2017-9730

CVE-2017-9730 affects nuevoMailer 6.0 and earlier, where the vulnerability is a SQL injection in rdr.php via the r parameter. The root cause is unsanitized input leading to remote code execution of arbitrary SQL commands. Multiple connected sources confirm the same description and indicate a time...