Show filters
62 Total Results
Displaying 51-60 of 62
Sort by:
Attacker Value
Unknown
CVE-2006-5322
Disclosure Date: October 17, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-5294
Disclosure Date: October 16, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter.
0
Attacker Value
Unknown
CVE-2006-2523
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie.
0
Attacker Value
Unknown
CVE-2006-2323
Disclosure Date: May 12, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749.
0
Attacker Value
Unknown
CVE-2006-1906
Disclosure Date: April 20, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
0
Attacker Value
Unknown
CVE-2006-1746
Disclosure Date: April 12, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable.
0
Attacker Value
Unknown
CVE-2006-1749
Disclosure Date: April 12, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter. NOTE: this issue was later reported to affect 2.01 as well.
0
Attacker Value
Unknown
CVE-2005-3555
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.
0
Attacker Value
Unknown
CVE-2005-3556
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php.
0
Attacker Value
Unknown
CVE-2005-3557
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request.
0
