nuevoMailer version 6.0 and earlier time-based SQL Injection

Description: SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter. PoC: https://vulnerablesite.com/inc/rdr.php?r=69387c602c1056c556time based SQL INJ...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

Sql injection

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

CVE-2017-9730

CVE-2017-9730 affects nuevoMailer 6.0 and earlier, where the vulnerability is a SQL injection in rdr.php via the r parameter. The root cause is unsanitized input leading to remote code execution of arbitrary SQL commands. Multiple connected sources confirm the same description and indicate a time...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

PT-2017-19142

Name of the Vulnerable Software and Affected Versions nuevoMailer versions 6.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the r parameter in the rdr.php file. Recommendations For nuevoMailer versions 6.0 and earlier, update to...

CVE-2017-9730: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...