Vulnerability Database

308,484

Total vulnerabilities in the database

CVE-2007-2371

admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote attackers to cause a denial of service (loss of configuration data), and possibly perform direct static code injection, via a saveGlobalconfig action.

  • Published: Apr 30, 2007
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-2371
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
gregory_kokanosky / phpmynewsletter - 0.8_beta_5.x