CVE-2017-20030

🗓️ 10 Jun 2022 09:30:30Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 52 Views🌐 WEB

Vulnerability in PHPList 3.2.6, allowing remote SQL injectio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2017-20030	10 Jun 202214:37	–	circl
CNNVD	phplist SQL注入漏洞	10 Jun 202200:00	–	cnnvd
CNVD	phplist SQL Injection Vulnerability (CNVD-2022-53000)	5 Jul 202200:00	–	cnvd
Cvelist	CVE-2017-20030 PHPList Sending Campain sql injection	10 Jun 202209:30	–	cvelist
EUVD	EUVD-2017-11045	7 Oct 202500:30	–	euvd
NVD	CVE-2017-20030	10 Jun 202210:15	–	nvd
OpenVAS	phpList <= 3.2.6 Multiple Vulnerabilities	13 Jun 202200:00	–	openvas
OSV	CVE-2017-20030	10 Jun 202210:15	–	osv
Prion	Sql injection	10 Jun 202210:15	–	prion
RedhatCVE	CVE-2017-20030	22 May 202505:06	–	redhatcve

NVD

Vulners

Node

phplist phplistMatch3.2.6

[
  {
    "product": "PHPList",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "3.2.6"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
seclists	www.seclists.org/fulldisclosure/2017/Mar/45

Parameter	Position	Path	Description	CWE
unknown	query param	/lists/admin/	SQL injection vulnerability in PHPList 3.2.6 via manipulation of the /lists/admin/ Sending Campaign component, allowing remote attacker to inject SQL through query parameters.	CWE-89

17 Jun 2026 01:14Current

6.2Medium risk

Vulners AI Score6.2

CVSS 26.5

CVSS 3.14.7 - 7.2

EPSS0.00825

SSVC

CWE-89