CVEvulnerability
CVE-2006-0919
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-02-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
Affected configurations
• oi email marketing system 3.0
References
- http://secunia.com/advisories/18993 secunia.com
- http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt Exploit, Vendor Advisory
- http://www.osvdb.org/23462 www.osvdb.org
- http://www.securityfocus.com/archive/1/425924/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0718 www.vupen.com
- http://secunia.com/advisories/18993 secunia.com
- http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt Exploit, Vendor Advisory
- http://www.osvdb.org/23462 www.osvdb.org
- http://www.securityfocus.com/archive/1/425924/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0718 www.vupen.com