CVE-2012-3952

Description

Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page.

References

https://www.htbridge.com/advisory/HTB23100

https://exchange.xforce.ibmcloud.com/vulnerabilities/77526

http://www.phplist.com/?lid=579

http://secunia.com/advisories/50150

http://osvdb.org/84482

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS