Description
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.
Metrics
CVSS 2.0 6.5/10
AV:N/AC:L/Au:S/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://osvdb.org/20567
- http://osvdb.org/20568
- http://secunia.com/advisories/17476Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/416005/30/0/threaded
- http://www.securityfocus.com/bid/15350
- http://www.trapkit.de/advisories/TKADV2005-11-001.txtExploit, Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2345
- http://osvdb.org/20567
- http://osvdb.org/20568
- http://secunia.com/advisories/17476Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/416005/30/0/threaded
- http://www.securityfocus.com/bid/15350
- http://www.trapkit.de/advisories/TKADV2005-11-001.txtExploit, Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2345
Timeline
- Published
- Nov 16, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified