Description
SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) opt_in_out.php.inc, (2) confirmation.php.inc, and (3) renewal.php.inc in mailinglist/.
References (3)
Core 3
Core References
Broken Link vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32903
Broken Link x_refsource_confirm
http://sourceforge.net/project/shownotes.php?release_id=647876
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/33224
Scores
EPSS
0.0105
EPSS Percentile
60.7%
Details
CWE
CWE-89
Status
published
Products (1)
adbnewssender_project/adbnewssender
< 1.5.1
Published
Feb 04, 2009
Tracked Since
Feb 18, 2026