QwikSec

Security Database

CVE

CWE

Training

CVE-2012-4247

Published: Aug 12, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) remote_user, (2) remote_database, (3) remote_userprefix, (4) remote_password, or (5) remote_prefix parameter to the import4 page; or the (6) id parameter to the bouncerule page.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.phplist.com/?lid=579

x_refsource_CONFIRM

https://www.httpcs.com/advisory/httpcs1

x_refsource_MISC

https://www.httpcs.com/advisories

x_refsource_MISC

https://www.httpcs.com/advisory/httpcs4

x_refsource_MISC

https://www.httpcs.com/advisory/httpcs3

x_refsource_MISC

https://www.httpcs.com/advisory/httpcs2

x_refsource_MISC

https://www.httpcs.com/advisory/httpcs6

x_refsource_MISC

https://www.httpcs.com/advisory/httpcs7

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.