Back

CVE-2005-2432

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Published: Aug 3, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
tincan phplist *

GitHub Security Advisory GHSA-wf3c-jw95-j2h6

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.31%

Top 32% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub