CVE-2012-2740

CVE-2012-2740 affects phpList prior to 2.10.18, where Input passed via the parameter 'sortby' in the public_html/lists/admin/find action is not properly sanitized, enabling remote attackers to execute arbitrary SQL commands. The vulnerability can lead to SQL injection with potential exposure/mani...