Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 3
- PHPList Mailing List Manager 2.x - '/admin/eventlog.php' Multiple Cross-Site Scripting Vulnerabilities EDB-26483 · webapps · Nov 7, 2005 · verified
- PHPList Mailing List Manager 2.x - '/admin/configure.php?id' Cross-Site Scripting EDB-26484 · webapps · Nov 7, 2005 · verified
- PHPList Mailing List Manager 2.x - '/admin/users.php?find' Cross-Site Scripting EDB-26485 · webapps · Nov 7, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://www.trapkit.de/advisories/TKADV2005-11-001.txt
- 20574 vdb-entry
- 20051107 [TKADV2005-11-001] Multiple vulnerabilities in PHPlist mailing-list
- 20573 vdb-entry
- ADV-2005-2345 vdb-entry
- 17476 third-party-advisory
- 15350 vdb-entry
- 20572 vdb-entry
- 20570 vdb-entry
- 20571 vdb-entry
- 20576 vdb-entry
- 20575 vdb-entry