nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-9730 CVE-2017-9730
CRITICAL
nuevoMailer 6.0 - SQL Injection
Record summary
CVE-2017-9730 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBnuevoMailer 6.0 - SQL InjectionExploitDB exploitby Oleg BoytsevNot analyzed1 file
References
242193exploit
https://www.exploit-db.com/exploits/42193