CVE-2005-2432
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the...
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
- Record
CVE-2005-2432- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
- Record
CVE-2005-2432- Updated
- 2026-11-02
EUVDEUVD-2005-2433 No score
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
- Record
EUVD-2005-2433- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wf3c-jw95-j2h6 No score
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the...
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.
- Record
GHSA-wf3c-jw95-j2h6- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpList 2.8.12 - Admin Page SQL Injection | 2005-07-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2432 is a high vulnerability (CVSS 7.5) in Tincan Phplist, published August 3, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. No source names a fixed version.
References
secunia.com/advisories/16274
osvdb.org/18316
exchange.xforce.ibmcloud.com/vulnerabilities/21576
marc.info?l=bugtraq&m=112291396731712&w=2
securitytracker.com/id?1014607
securityfocus.com/bid/14403
nvd.nist.gov/vuln/detail/CVE-2005-2432
github.com/advisories/GHSA-wf3c-jw95-j2h6