PHPList admin/index.php id Parameter SQL Injection

ID 3152.PRM
Type nessus
Reporter Tenable
Modified 2019-03-06T00:00:00


The remote host is running PHPList. PHPList is a PHP application that gathers handles mailing and customer lists. This version is reported to be prone to a SQL Injection flaw. An attacker exploiting this flaw would be able to read the database, manipulate the database, and possibly run commands with the privileges of the web server.

                                            Binary data 3152.prm