CVE-2021-3188

phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...

phpList Remote Code Execution (CVE-2021-3188)

A remote code execution vulnerability exists in phpList. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-3188

CVE-2021-3188 affects phpList 3.6.0. The vulnerability is a CSV injection issue tied to the email parameter and exports under /lists/admin/, with the CVE described as enabling CSV injection. The available data confirms the affected software and the general class of vulnerability (CSV injection) b...