CVE-2020-15073

概要

参考情報

• blog.telspace.co.za/2020/07/phplist-cve-2020-15072-cve-2020-15073.html · Exploit
• discuss.phplist.org/t/phplist-3-5-5-has-been-released/6377 · Release Notes
• phplist.org/newslist/phplist-3-5-5-release-notes · Release Notes

phplist のその他の脆弱性

• CVE-2025-28074中 6.1phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploit…
• CVE-2025-28073中 6.1phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary…
• CVE-2023-27576中 6.7An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super …
• CVE-2017-20036中 5.4A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ …
• CVE-2017-20035中 5.4A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the fil…