Skip to content

Tincan Phplist vulnerabilities

tincan phplistCross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and...CVE-2012-5228Public exploit4.3 MediumOctober 1, 2012
tincan phplistMultiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow...CVE-2011-1682Public exploit4.3 MediumApril 13, 2011
tincan phplistMultiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote...CVE-2011-0748Public exploit6.8 MediumApril 13, 2011
tincan phplistDynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when...CVE-2009-0422Public exploit7.5 HighFebruary 5, 2009
tincan phplistphplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a ...CVE-2008-5887EPSS 11.3%5.0 MediumJanuary 12, 2009
tincan phplistMultiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute...CVE-2006-53227.5 HighOctober 17, 2006
tincan phplistMultiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote...CVE-2006-53214.3 MediumOctober 17, 2006
tincan phplistCross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote...CVE-2006-5294Public exploit4.3 MediumOctober 16, 2006
tincan phplistDirectory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to...CVE-2006-17465.0 MediumApril 12, 2006
tincan phplistDirectory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows...CVE-2005-35575.0 MediumNovember 16, 2005
tincan phplistMultiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote...CVE-2005-3556Public exploit4.3 MediumNovember 16, 2005
tincan phplistMultiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote...CVE-2005-3555Public exploit6.5 MediumNovember 16, 2005
tincan phplistPhpList allows remote attackers to obtain sensitive information via a direct request to (1) about...CVE-2005-24335.0 MediumAugust 3, 2005
tincan phplistSQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the...CVE-2005-2432Public exploit7.5 HighAugust 3, 2005