CVE-2011-1682

Multiple cross-site request forgery CSRF vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create a list or 2 insert cross-site scripting XSS sequences. NOTE: this issue exists because of an incomplete fix for...

CVE-2011-1682

phpList prior to 2.10.13 is affected by CSRF vulnerabilities that allow an attacker to hijack admin sessions by issuing requests to (1) create a list and (2) insert XSS sequences. The issue stems from an incomplete fix for CVE-2011-0748, and multiple sources confirm these CSRF flaws exist in phpL...