| Package | Affected versions | Patched versions |
|---|---|---|
| phplist | = 3.5.9 |
phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free