Vulnerabilities > CVE-2006-5294 - Unspecified vulnerability in Tincan PHPlist

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

tincan

exploit available

NVD

Published: 2006-10-16

Updated: 2018-10-17

Summary

Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter. This vulnerability is addressed in the following product release: PHPList, Mailing List Manager, 2.10.3

Vulnerable Configurations

Part	Description	Count
Application	Tincan Tincan Phplist 2.6 Tincan Phplist 2.6.1 Tincan Phplist 2.6.2 Tincan Phplist 2.6.3 Tincan Phplist 2.6.4 Tincan Phplist 2.8.12 Tincan Phplist 2.10.1 Tincan Phplist 1.0 Tincan Phplist 1.0.1 Tincan Phplist 1.1.2B Tincan Phplist 1.1.3B Tincan Phplist 1.1.4B Tincan Phplist 1.1.5 Tincan Phplist 1.1.5B Tincan Phplist 1.1.6 Tincan Phplist 1.1.7 Tincan Phplist 1.3.5 Tincan Phplist 1.3.7 Tincan Phplist 1.4.1 Tincan Phplist 1.5.0 Tincan Phplist 1.5.1 Tincan Phplist 1.6.0 Tincan Phplist 1.6.1 Tincan Phplist 1.6.3 Tincan Phplist 1.6.4 Tincan Phplist 1.7.0 Tincan Phplist 1.7.1 Tincan Phplist 1.8.0 Tincan Phplist 1.9.0 Tincan Phplist 1.9.1 Tincan Phplist 1.9.2 Tincan Phplist 1.9.3 Tincan Phplist 2.1.0 Tincan Phplist 2.1.1 Tincan Phplist 2.1.3 Tincan Phplist 2.1.4 Tincan Phplist 2.2.0 Tincan Phplist 2.2.1 Tincan Phplist 2.3.0 Tincan Phplist 2.3.1 Tincan Phplist 2.3.2 Tincan Phplist 2.3.3 Tincan Phplist 2.3.4 Tincan Phplist 2.4.0 Tincan Phplist 2.4.7 Tincan Phplist 2.5.0 Tincan Phplist 2.5.1 Tincan Phplist 2.5.2 Tincan Phplist 2.5.3 Tincan Phplist 2.5.4 Tincan Phplist 2.5.5 Tincan Phplist 2.5.6 Tincan Phplist 2.5.7 Tincan Phplist 2.5.8 Tincan Phplist 2.6.0 Tincan Phplist 2.6.5 Tincan Phplist 2.7.1 Tincan Phplist 2.7.2 Tincan Phplist 2.8.2 Tincan Phplist 2.8.7 Tincan Phplist 2.9.3 Tincan Phplist 2.9.4 Tincan Phplist 2.9.5 Tincan Phplist 2.10.2	64

Exploit-Db

description	PHPList 2.x Public Pages MultipleCross-Site Scripting Vulnerabilities. CVE-2006-5294. Webapps exploit for php platform
id	EDB-ID:28790
last seen	2016-02-03
modified	2006-10-12
published	2006-10-12
reporter	Michiel Dethmers
source	https://www.exploit-db.com/download/28790/
title	PHPList 2.x Public Pages MultipleCross-Site Scripting Vulnerabilities

Summary

Vulnerable Configurations

Exploit-Db

References