EDB-18419
funktionalphpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor Cyber-Crystalveröffentlicht 2012-01-26Katalog exploit_db
01
ausgenutzte CVEs (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-5228US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web s… | ||||
| CVE-2012-4247US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) rem… | ||||
| CVE-2012-4246US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) pag… | ||||
| CVE-2011-1682US | medium4.3 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1… | ||||
| CVE-2011-0748US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan