Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cyber-crystal vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4246
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList prior to 2.10.19 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter; or the (2) footer, (3) status, or (4) testtarget parameter in the send page.
Phplist Phplist 2.10.14Phplist Phplist 2.10.12Phplist Phplist 2.10.4Phplist Phplist 2.10.2Phplist Phplist 2.7.2Phplist Phplist 2.6.5Phplist Phplist 2.10.11Phplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist Phplist 2.10.8Phplist Phplist 2.10.7Phplist PhplistPhplist Phplist 2.10.17Phplist Phplist 2.10.16Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.8.7Phplist Phplist 2.8.2Phplist Phplist 2.10.15Phplist Phplist 2.10.13Phplist Phplist 2.10.5Phplist Phplist 2.10.3
NA
CVE-2012-4247
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList prior to 2.10.19 allow remote malicious users to inject arbitrary web script or HTML via the (1) remote_user, (2) remote_database, (3) remote_userprefix, (4) remote_password, or (5) remote_pre...
Phplist Phplist 2.10.16Phplist Phplist 2.10.14Phplist Phplist 2.10.7Phplist Phplist 2.10.4Phplist Phplist 2.7.2Phplist Phplist 2.6.5Phplist Phplist 2.10.12Phplist Phplist 2.10.11Phplist Phplist 2.10.10Phplist Phplist 2.10.9Phplist PhplistPhplist Phplist 2.10.17Phplist Phplist 2.10.2Phplist Phplist 2.10.1Phplist Phplist 2.8.12Phplist Phplist 2.8.7Phplist Phplist 2.10.15Phplist Phplist 2.10.13Phplist Phplist 2.10.8Phplist Phplist 2.10.5Phplist Phplist 2.10.3Phplist Phplist 2.8.2
NA
CVE-2012-5226
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.
Peel Peel Shopping 2.8Peel Peel Shopping 2.9
NA
CVE-2012-5228
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions prior to 2.10.19 allows remote malicious users to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from th...
Tincan Phplist 2.10.17Tincan PhplistTincan Phplist 2.10.16Tincan Phplist 2.10.15Tincan Phplist 2.10.4Tincan Phplist 2.10.11Tincan Phplist 2.10.10Tincan Phplist 2.6.2Tincan Phplist 2.6.1Tincan Phplist 2.6.5Tincan Phplist 2.6.4Tincan Phplist 2.6.0Tincan Phplist 2.2.0Tincan Phplist 2.1.4Tincan Phplist 2.4.0Tincan Phplist 2.3.4Tincan Phplist 1.6.0Tincan Phplist 1.6.1Tincan Phplist 1.9.2Tincan Phplist 1.9.3Tincan Phplist 1.0Tincan Phplist 1.1.6
NA
CVE-2011-1682
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue...
Tincan Phplist 2.7.2Tincan Phplist 2.8.2Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.5Tincan Phplist 2.5.4Tincan Phplist 2.5.3Tincan Phplist 2.3.3Tincan Phplist 2.3.2Tincan Phplist 2.1.1Tincan Phplist 2.1.0Tincan Phplist 1.6.4Tincan Phplist 1.6.3Tincan Phplist 1.3.5Tincan Phplist 1.1.7Tincan Phplist 1.0.1Tincan Phplist 1.0Tincan Phplist 2.9.5Tincan Phplist 2.8.12Tincan Phplist 2.10.1
NA
CVE-2011-0748
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList prior to 2.10.13 allow remote malicious users to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
Tincan Phplist 2.8.2Tincan Phplist 2.8.12Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.3Tincan Phplist 2.5.2Tincan Phplist 2.3.2Tincan Phplist 2.3.1Tincan Phplist 2.1.0Tincan Phplist 1.9.3Tincan Phplist 1.6.3Tincan Phplist 1.6.1Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.7.2Tincan Phplist 2.10.5Tincan Phplist 2.10.6Tincan Phplist 2.6.4Tincan Phplist 2.6.2Tincan Phplist 2.5.5
NA
CVE-2012-5005
Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote malicious users to hijack the authentication of admins for requests that add admin accounts via an add action.
Frankdeveloper Vr Gpub 4.0
NA
CVE-2012-5227
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Peel Peel Shopping 2.8Peel Peel Shopping 2.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook