CVE-2006-5294

Description

References

• mantis.phplist.com/changelog_page.php · Patch
• secunia.com/advisories/22405 · Patch
• securityreason.com/securityalert/1728
• tincan.co.uk · Patch
• websecurity.com.ua/267
• phplist.com/news
• securityfocus.com/archive/1/448411/100/0/threaded
• securityfocus.com/bid/20483 · Exploit
• vupen.com/english/advisories/2006/4027

Más vulnerabilidades de phplist

• CVE-2012-5228MEDIO 4.3Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows re…
• CVE-2011-1682MEDIO 4.3Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authenticatio…
• CVE-2011-0748MEDIO 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of …
• CVE-2009-0422ALTO 7.5Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote…
• CVE-2008-5887MEDIO 5.0phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."