CVE-2005-2432

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-03 · updated 2026-06-16

Description

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Affected products

Tincan Phplist: all versions

References

http://marc.info/?l=bugtraq&m=112258115325054&w=2
http://marc.info/?l=bugtraq&m=112291396731712&w=2
http://secunia.com/advisories/16274
http://securitytracker.com/id?1014607
http://www.osvdb.org/18316
http://www.securityfocus.com/bid/14403
https://exchange.xforce.ibmcloud.com/vulnerabilities/21576
http://marc.info/?l=bugtraq&m=112258115325054&w=2
http://marc.info/?l=bugtraq&m=112291396731712&w=2
http://secunia.com/advisories/16274
http://securitytracker.com/id?1014607
http://www.osvdb.org/18316

Get alerted when CVE-2005-2432 or the next vulnerability affects your stack