EDB-18419
functionalphpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
view exploit source exploit_dbverifiedtype webappsauthor Cyber-Crystalpublished 2012-01-26catalog exploit_db
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-5228US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web s… | ||||
| CVE-2012-4247US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) rem… | ||||
| CVE-2012-4246US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) pag… | ||||
| CVE-2011-1682US | medium4.3 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1… | ||||
| CVE-2011-0748US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan