Published: 16/11/2005 Updated: 19/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 660

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and previous versions allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tincan phplist

source: wwwsecurityfocuscom/bid/15350/info PHPList is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly santize user-supplied input The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities ...

source: wwwsecurityfocuscom/bid/15350/info PHPList is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly santize user-supplied input The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities http: ...

NVD-CWE-Other http://www.trapkit.de/advisories/TKADV2005-11-001.txt http://secunia.com/advisories/17476 http://www.securityfocus.com/bid/15350 http://osvdb.org/20567 http://osvdb.org/20568 http://www.vupen.com/english/advisories/2005/2345 http://www.securityfocus.com/archive/1/416005/30/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/26481/

CVE-2005-3555

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect