CVE-2012-5228

phplist <2.10.19 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Cyber-Crystal · htmlwebappsphp
https://www.exploit-db.com/exploits/18419

References (5)

Scores

EPSS 0.0419
EPSS Percentile 88.6%

Classification

CWE
CWE-79
Status published

Affected Products (50)

tincan/phplist
tincan/phplist < 2.10.18
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
tincan/phplist
... and 35 more

Timeline

Published Oct 01, 2012
Tracked Since Feb 18, 2026