CVE-2006-5321

Published: Oct 17, 2006Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (13)

Products: Tincan: Phplist

Tincan

1 product

Phplist

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Tincan Phplist	Up to 2.10.2
Tincan Phplist	Version 2.10.1
Tincan Phplist	Version 2.6.1
Tincan Phplist	Version 2.6.2
Tincan Phplist	Version 2.6.3
Tincan Phplist	Version 2.6.4
Tincan Phplist	Version 2.6.5
Tincan Phplist	Version 2.6
Tincan Phplist	Version 2.7.1
Tincan Phplist	Version 2.7.2
Tincan Phplist	Version 2.8.12
Tincan Phplist	Version 2.8.2
Tincan Phplist	Version 2.8.7

References (6)

http://tincan.co.uk/?lid=1821

Source: cve@mitre.org

http://www.phplist.com/news

Source: cve@mitre.org

http://www.securityfocus.com/bid/20483

Source: cve@mitre.org

Exploit

http://tincan.co.uk/?lid=1821

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.phplist.com/news

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20483

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.