Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6786. PoCs published by BlackHawk.
AI-analyzed exploit summary This exploit targets Open Newsletter <= 2.* and includes multiple attack vectors: subscriber email retrieval, credential retrieval, and remote command execution. It leverages weak session validation and file inclusion vulnerabilities to achieve RCE.
Description
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting the code into the email parameter to (1) subscribe.php or (2) unsubscribe.php.
Exploits (1)
This exploit targets Open Newsletter <= 2.* and includes multiple attack vectors: subscriber email retrieval, credential retrieval, and remote command execution. It leverages weak session validation and file inclusion vulnerabilities to achieve RCE.