Vulnerabilities > CVE-2005-2432 - SQL Injection vulnerability in PHPList Admin Page

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
tincan
exploit available
NVD
Published: 2005-08-03
Updated: 2017-07-11

Summary

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Vulnerable Configurations

Part Description Count
Application
Tincan
1

Exploit-Db

descriptionPHPList 2.8.12 Admin Page SQL Injection Vulnerability. CVE-2005-2432. Webapps exploit for php platform
idEDB-ID:26045
last seen2016-02-03
modified2005-07-28
published2005-07-28
reportertgo
sourcehttps://www.exploit-db.com/download/26045/
titlePHPList 2.8.12 Admin Page SQL Injection Vulnerability

References