nuevoMailer version 6.0 and earlier time-based SQL Injection

Description: SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter. PoC: https://vulnerablesite.com/inc/rdr.php?r=69387c602c1056c556time based SQL INJ...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

Sql injection

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...

CVE-2017-9730

CVE-2017-9730 affects nuevoMailer 6.0 and earlier, where the vulnerability is a SQL injection in rdr.php via the r parameter. The root cause is unsanitized input leading to remote code execution of arbitrary SQL commands. Multiple connected sources confirm the same description and indicate a time...

CVE-2017-9730

SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter...