CVE-2005-2432

Published: Aug 3, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Affected (1)

Products: Tincan: Phplist

Tincan

1 product

Phplist

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tincan Phplist	All versions

References (14)

http://marc.info/?l=bugtraq&m=112258115325054&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112291396731712&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16274

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1014607

Source: cve@mitre.org

http://www.osvdb.org/18316

Source: cve@mitre.org

http://www.securityfocus.com/bid/14403

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/21576

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112258115325054&w=2