CVE-2012-5228

EPSS 1.6%

Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18419unverified exploitdbwww.exploit-db.com/exploits/18419unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/78548 http://secunia.com/advisories/47727 https://exchange.xforce.ibmcloud.com/vulnerabilities/72747 http://www.exploit-db.com/exploits/18419 http://www.securityfocus.com/bid/51681