CVE-2012-5228 | | | 2012-10-01 | Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to i… |
CVE-2011-1682 | | | 2011-04-13 | Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators… |
CVE-2011-0748 | | | 2011-04-13 | Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for… |
CVE-2009-0422 | | | 2009-02-05 | Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to inclu… |
CVE-2008-5887 | | | 2009-01-12 | phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability." |
CVE-2007-4073 | | | 2007-07-30 | Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NO… |
CVE-2007-4072 | | | 2007-07-30 | Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive infor… |
CVE-2007-4071 | | | 2007-07-30 | Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or… |
CVE-2006-5322 | | | 2006-10-17 | Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2006-5321 | | | 2006-10-17 | Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vect… |
CVE-2006-5294 | | | 2006-10-16 | Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscri… |
CVE-2006-1746 | | | 2006-04-12 | Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] o… |
CVE-2005-3557 | | | 2005-11-16 | Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in t… |
CVE-2005-3556 | | | 2005-11-16 | Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lis… |
CVE-2005-3555 | | | 2005-11-16 | Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQ… |
CVE-2005-2433 | | | 2005-08-03 | PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php or (4) usercheck.ph… |
CVE-2005-2432 | | | 2005-08-03 | SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin. |