CVE-2005-3556: XSS
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3556?
CVE-2005-3556 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2005-3556?
To fix CVE-2005-3556, upgrade PHPlist to version 2.10.2 or later.
What software is affected by CVE-2005-3556?
CVE-2005-3556 affects PHPlist versions 2.10.1 and earlier.
What type of vulnerability is CVE-2005-3556?
CVE-2005-3556 is a cross-site scripting (XSS) vulnerability.
Can CVE-2005-3556 be exploited remotely?
Yes, CVE-2005-3556 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.