high7.5Public exploit code
CVE-2005-2432
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpList 2.8.12 - Admin Page SQL Injection2005-07-28 · webapps · php · Verified
Impact
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tincan | Phplist | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112258115325054&w=2
- http://marc.info/?l=bugtraq&m=112291396731712&w=2
- http://secunia.com/advisories/16274
- http://securitytracker.com/id?1014607
- http://www.osvdb.org/18316
- http://www.securityfocus.com/bid/14403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21576
- http://marc.info/?l=bugtraq&m=112258115325054&w=2
- http://marc.info/?l=bugtraq&m=112291396731712&w=2
- http://secunia.com/advisories/16274
- http://securitytracker.com/id?1014607
- http://www.osvdb.org/18316
- http://www.securityfocus.com/bid/14403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21576