CVE-2007-6138 SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page). NOTE: some of these...
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page). NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vu mass mailer | All versions | No fix listed |
References
- aria-security.net
- 38807 vdb-entry
- 27758 third-party-advisory vendor-advisory
- 20071121 Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection mailing-list
- 26522 vdb-entry
- ADV-2007-3966 vdb-entry