CVE-2005-2432

Tincan Phplist - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Exploits (1)

exploitdb WORKING POC VERIFIED
by tgo · textwebappsphp
https://www.exploit-db.com/exploits/26045

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16274
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/18316
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21576
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112291396731712&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112258115325054&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014607
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14403

Scores

EPSS 0.0070
EPSS Percentile 72.2%

Details

Status published
Products (1)
tincan/phplist
Published Aug 03, 2005
Tracked Since Feb 18, 2026