CVE-2017-15967 Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template.
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailing-manager mailing list manager pro | = 3.0 | No fix listed |
References
- packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
- 43092 exploit issue-tracking third-party-advisory vdb-entry