PHPList admin/index.php id Parameter SQL Injection

2005-07-28T00:00:00
ID 3152.PRM
Type nessus
Reporter Tenable
Modified 2019-03-06T00:00:00

Description

The remote host is running PHPList. PHPList is a PHP application that gathers handles mailing and customer lists. This version is reported to be prone to a SQL Injection flaw. An attacker exploiting this flaw would be able to read the database, manipulate the database, and possibly run commands with the privileges of the web server.

                                        
                                            Binary data 3152.prm