NetSight
IP …
high7.5Public exploit code

CVE-2012-3953

SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete paramete…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page.

Affected products

VendorProductAffected versions
PhplistPhplist
through 2.10.18
Versions 2.6.5, 2.7.1, 2.7.2, 2.8.2, 2.8.7

Weakness classification

CWE-89

References