CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5294

Cross-site scripting XSS vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter...

CVE-2006-5294

CVE-2006-5294 affects phplist (index.php) prior to version 2.10.3. The vulnerability is a Cross-Site Scripting (XSS) flaw that enables remote attackers to inject arbitrary web script or HTML through the unsubscribeemail parameter. Root cause is improper handling/sanitization of user-supplied inpu...