SQL Injection Vulnerability in DSNewsletter

Summary for SQL Injection Vulnerability in DSNewsletter

Vulnerability
SQL Injection Vulnerability in DSNewsletter
Discovered
2006.03.12
Last Update
2006.03.23 Exploitation code published
ID
EV0097
CVE
CVE-2006-1237
Risk Level
medium
Type
SQL Injection
Status
Unpatched. No reply from developer(s)
Vendor
n/a
Vulnerable Software
DSNewsletter
Version
1.0
PoC/Exploit
Available
Solution
Not available
Discovered by
Aliaksandr Hartsuyeu (eVuln.com)

Order PHP Code Analysis made by eVuln team

Protect a site by source code analysis of a website made by eVuln team.The work will be done by specialists in web security.