EDB-26045

functional

phpList 2.8.12 - Admin Page SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor tgopublished 2005-07-28catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-2432US	high7.5	1.31% (70th)	Exploit	2005-08-03
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.