Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phplist phplist 2.8.7 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-4246
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList prior to 2.10.19 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.
Phplist Phplist 2.10.14Phplist Phplist 2.10.12Phplist Phplist 2.10.4Phplist Phplist 2.10.2Phplist Phplist 2.7.2Phplist Phplist 2.6.5Phplist Phplist 2.10.11Phplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist Phplist 2.10.8Phplist Phplist 2.10.7Phplist PhplistPhplist Phplist 2.10.17Phplist Phplist 2.10.16Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.8.7Phplist Phplist 2.8.2Phplist Phplist 2.10.15Phplist Phplist 2.10.13Phplist Phplist 2.10.5Phplist Phplist 2.10.3
4.3
CVSSv2
CVE-2012-4247
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList prior to 2.10.19 allow remote malicious users to inject arbitrary web script or HTML via the (1) remote_user, (2) remote_database, (3) remote_userprefix, (4) remote_password, or (5) remote_pre...
Phplist Phplist 2.10.16Phplist Phplist 2.10.14Phplist Phplist 2.10.7Phplist Phplist 2.10.4Phplist Phplist 2.7.2Phplist Phplist 2.6.5Phplist Phplist 2.10.12Phplist Phplist 2.10.11Phplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist PhplistPhplist Phplist 2.10.17Phplist Phplist 2.10.2Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.8.7Phplist Phplist 2.10.15Phplist Phplist 2.10.13Phplist Phplist 2.10.8Phplist Phplist 2.10.5Phplist Phplist 2.10.3Phplist Phplist 2.8.2
2.6
CVSSv2
CVE-2012-3952
Cross-site scripting (XSS) vulnerability in admin/index.php in phpList prior to 2.10.19 allows remote malicious users to inject arbitrary web script or HTML via the unconfirmed parameter to the user page.
Phplist PhplistPhplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.10.17Phplist Phplist 2.10.16Phplist Phplist 2.10.8Phplist Phplist 2.10.7Phplist Phplist 2.8.7Phplist Phplist 2.8.2Phplist Phplist 2.10.12Phplist Phplist 2.10.11Phplist Phplist 2.10.3Phplist Phplist 2.10.2Phplist Phplist 2.6.5Phplist Phplist 2.10.15Phplist Phplist 2.10.14Phplist Phplist 2.10.13Phplist Phplist 2.10.5Phplist Phplist 2.10.4Phplist Phplist 2.7.2
7.5
CVSSv2
CVE-2012-3953
SQL injection vulnerability in admin/index.php in phpList prior to 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page.
Phplist Phplist 2.10.12Phplist Phplist 2.10.11Phplist Phplist 2.10.3Phplist Phplist 2.10.2Phplist Phplist 2.6.5Phplist PhplistPhplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.10.15Phplist Phplist 2.10.14Phplist Phplist 2.10.13Phplist Phplist 2.10.5Phplist Phplist 2.10.4Phplist Phplist 2.7.2Phplist Phplist 2.7.1Phplist Phplist 2.10.17Phplist Phplist 2.10.16Phplist Phplist 2.10.8Phplist Phplist 2.10.7Phplist Phplist 2.8.7
5
CVSSv2
CVE-2006-1746
Directory traversal vulnerability in PHPList 2.10.2 and previous versions allows remote malicious users to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable.
Tincan Phplist 2.6.1Tincan Phplist 2.6.2Tincan Phplist 2.8.2Tincan Phplist 2.8.7Tincan Phplist 2.10.1Tincan Phplist 2.6Tincan Phplist 2.7.2Tincan Phplist 2.8.12Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.6.3Tincan Phplist 2.6.4Tincan Phplist
4.3
CVSSv2
CVE-2006-5321
Multiple cross-site scripting (XSS) vulnerabilities in phplist prior to 2.10.3 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Tincan Phplist 2.10.1Tincan Phplist 2.6.1Tincan Phplist 2.6.3Tincan Phplist 2.8.12Tincan Phplist 2.8.7Tincan Phplist 2.6.4Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.7.2Tincan Phplist 2.6Tincan Phplist 2.6.2Tincan Phplist 2.8.2Tincan Phplist
7.5
CVSSv2
CVE-2009-0422
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and previous versions, when register_globals is disabled, allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] paramet...
Tincan Phplist 2.7.2Tincan Phplist 2.8.2Tincan Phplist 2.10.6Tincan Phplist 2.10.7Tincan Phplist 2.6.0Tincan Phplist 2.5.8Tincan Phplist 2.5.0Tincan Phplist 2.4.0Tincan Phplist 2.2.1Tincan Phplist 2.2.0Tincan Phplist 1.9.1Tincan Phplist 1.9.0Tincan Phplist 2.8.12Tincan Phplist 2.10.1Tincan Phplist 2.8.7Tincan Phplist 2.6.4Tincan Phplist 2.5.7Tincan Phplist 2.5.6Tincan Phplist 2.3.4Tincan Phplist 2.4.7Tincan Phplist 2.1.4Tincan Phplist 2.1.3
5
CVSSv2
CVE-2008-5887
phplist prior to 2.10.8 allows remote malicious users to include files via unknown vectors, related to a "local file include vulnerability."
Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.10.4Tincan Phplist 2.10.5Tincan Phplist 2.6.3Tincan Phplist 2.6.0Tincan Phplist 2.5.1Tincan Phplist 2.5.0Tincan Phplist 2.3.0Tincan Phplist 2.2.1Tincan Phplist 1.9.2Tincan Phplist 1.9.1Tincan Phplist 1.6.0Tincan Phplist 1.5.1Tincan Phplist 1.1.5Tincan Phplist 1.1.5bTincan Phplist 2.8.12Tincan Phplist 2.10.1Tincan Phplist 2.6.4Tincan Phplist 2.6.2Tincan Phplist 2.5.6Tincan Phplist 2.5.5
4.3
CVSSv2
CVE-2011-1682
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue...
Tincan Phplist 2.7.2Tincan Phplist 2.8.2Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.5Tincan Phplist 2.5.4Tincan Phplist 2.5.3Tincan Phplist 2.3.3Tincan Phplist 2.3.2Tincan Phplist 2.1.1Tincan Phplist 2.1.0Tincan Phplist 1.6.4Tincan Phplist 1.6.3Tincan Phplist 1.3.5Tincan Phplist 1.1.7Tincan Phplist 1.0.1Tincan Phplist 1.0Tincan Phplist 2.9.5Tincan Phplist 2.8.12Tincan Phplist 2.10.1
6.8
CVSSv2
CVE-2011-0748
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList prior to 2.10.13 allow remote malicious users to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
Tincan Phplist 2.8.2Tincan Phplist 2.8.12Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.3Tincan Phplist 2.5.2Tincan Phplist 2.3.2Tincan Phplist 2.3.1Tincan Phplist 2.1.0Tincan Phplist 1.9.3Tincan Phplist 1.6.3Tincan Phplist 1.6.1Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.7.2Tincan Phplist 2.10.5Tincan Phplist 2.10.6Tincan Phplist 2.6.4Tincan Phplist 2.6.2Tincan Phplist 2.5.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook