SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Newsletter_mx | Mxmania | * | 1.0.2 (including) |