CVE-2012-5228

🗓️ 01 Oct 2012 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Cross-site scripting vulnerability in phplist 2.10.9, 2.10.1

Reporter	Title	Published	Views	Family All 6
ATTACKERKB	CVE-2012-5228	1 Oct 201220:55	–	attackerkb
Circl	CVE-2012-5228	26 Jan 201200:00	–	circl
Cvelist	CVE-2012-5228	1 Oct 201220:00	–	cvelist
EUVD	EUVD-2012-5151	7 Oct 202500:30	–	euvd
NVD	CVE-2012-5228	1 Oct 201220:55	–	nvd
Prion	Cross site scripting	1 Oct 201220:55	–	prion

NVD

Node

tincan phplistRange≤2.10.18

OR

tincan phplistMatch1.0

OR

tincan phplistMatch1.0.1

OR

tincan phplistMatch1.1.2b

OR

tincan phplistMatch1.1.3b

OR

tincan phplistMatch1.1.4b

OR

tincan phplistMatch1.1.5

OR

tincan phplistMatch1.1.5b

OR

tincan phplistMatch1.1.6

OR

tincan phplistMatch1.1.7

OR

tincan phplistMatch1.3.5

OR

tincan phplistMatch1.3.7

OR

tincan phplistMatch1.4.1

OR

tincan phplistMatch1.5.0

OR

tincan phplistMatch1.5.1

OR

tincan phplistMatch1.6.0

OR

tincan phplistMatch1.6.1

OR

tincan phplistMatch1.6.3

OR

tincan phplistMatch1.6.4

OR

tincan phplistMatch1.7.0

OR

tincan phplistMatch1.7.1

OR

tincan phplistMatch1.8.0

OR

tincan phplistMatch1.9.0

OR

tincan phplistMatch1.9.1

OR

tincan phplistMatch1.9.2

OR

tincan phplistMatch1.9.3

OR

tincan phplistMatch2.1.0

OR

tincan phplistMatch2.1.1

OR

tincan phplistMatch2.1.3

OR

tincan phplistMatch2.1.4

OR

tincan phplistMatch2.2.0

OR

tincan phplistMatch2.2.1

OR

tincan phplistMatch2.3.0

OR

tincan phplistMatch2.3.1

OR

tincan phplistMatch2.3.2

OR

tincan phplistMatch2.3.3

OR

tincan phplistMatch2.3.4

OR

tincan phplistMatch2.4.0

OR

tincan phplistMatch2.4.7

OR

tincan phplistMatch2.5.0

OR

tincan phplistMatch2.5.1

OR

tincan phplistMatch2.5.2

OR

tincan phplistMatch2.5.3

OR

tincan phplistMatch2.5.4

OR

tincan phplistMatch2.5.5

OR

tincan phplistMatch2.5.6

OR

tincan phplistMatch2.5.7

OR

tincan phplistMatch2.5.8

OR

tincan phplistMatch2.6

OR

tincan phplistMatch2.6.0

OR

tincan phplistMatch2.6.1

OR

tincan phplistMatch2.6.2

OR

tincan phplistMatch2.6.3

OR

tincan phplistMatch2.6.4

OR

tincan phplistMatch2.6.5

OR

tincan phplistMatch2.7.1

OR

tincan phplistMatch2.7.2

OR

tincan phplistMatch2.8.2

OR

tincan phplistMatch2.8.7

OR

tincan phplistMatch2.8.12

OR

tincan phplistMatch2.9.3

OR

tincan phplistMatch2.9.4

OR

tincan phplistMatch2.9.5

OR

tincan phplistMatch2.10.1

OR

tincan phplistMatch2.10.2

OR

tincan phplistMatch2.10.3

OR

tincan phplistMatch2.10.4

OR

tincan phplistMatch2.10.5

OR

tincan phplistMatch2.10.6

OR

tincan phplistMatch2.10.7

OR

tincan phplistMatch2.10.8

OR

tincan phplistMatch2.10.9

OR

tincan phplistMatch2.10.10

OR

tincan phplistMatch2.10.11

OR

tincan phplistMatch2.10.12

OR

tincan phplistMatch2.10.13

OR

tincan phplistMatch2.10.14

OR

tincan phplistMatch2.10.15

OR

tincan phplistMatch2.10.16

OR

tincan phplistMatch2.10.17

OR

tincan phplistMatch2.10.19

Source	Link
securityfocus	www.securityfocus.com/bid/51681
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/72747
osvdb	www.osvdb.org/78548
exploit-db	www.exploit-db.com/exploits/18419
secunia	www.secunia.com/advisories/47727

Parameter	Position	Path	Description	CWE
testtarget	query param	admin/index.php	Cross-site scripting vulnerability via testtarget parameter in admin/index.php (phplist) allowing injection of script/HTML.	CWE-79

29 Apr 2026 01:13Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.06718

cve-2012-5228 xss admin/index.php phplist web script injection html injection vulnerability