CVE-2014-2916: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

PT-2014-4956

Name of the Vulnerable Software and Affected Versions phpList versions prior to 3.0.6 Description A cross-site request forgery CSRF issue exists in the subscription page editor spageedit of phpList, allowing remote attackers to hijack the authentication of administrators via a request to "admin/"...