CVE-2014-2916

概要

参考情報

• labs.davidsopas.com/2014/04/phplist-csrf-on-subscription-page.html · Exploit
• secunia.com/advisories/57893 · Vendor Advisory
• phplist.com · Patch
• securitytracker.com/id/1030191

phplist のその他の脆弱性

• CVE-2025-28074中 6.1phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploit…
• CVE-2025-28073中 6.1phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary…
• CVE-2023-27576中 6.7An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super …
• CVE-2017-20036中 5.4A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ …
• CVE-2017-20035中 5.4A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the fil…