CVE-2020-35708

2020-12-2506:15:14

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.7%

JSON

phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the “Config - Import Administrators” page.

CPENameOperatorVersion
phplist3eq3.3.1
phplist3eq3.4.4
phplist3eq3.3.2
phplist3eq3.3.6
phplist3eq3.4.8
phplist3eq3.5.0
phplist3eq.3.3.8
phplist3eq3.5.6
phplist3eq.3.3.5
phplist3eq3.2.1

Name	Operator	Version
phplist3	eq	3.3.1
phplist3	eq	3.4.4
phplist3	eq	3.3.2
phplist3	eq	3.3.6
phplist3	eq	3.4.8
phplist3	eq	3.5.0
phplist3	eq	.3.3.8
phplist3	eq	3.5.6
phplist3	eq	.3.3.5
phplist3	eq	3.2.1