Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Email

phpList

phpList is an open-source newsletter manager. Phplist is free to download install and use and is easy to integrate with any website. Phplist is downloaded more than 10000 times per month.

Official Site:

https://www.phplist.com/

Severity Summary:

Critical: 6 High: 6 Medium: 24 Low: 2
Reference
Title
Severity
CVE-2017-20032
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2020-8547
phpList Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Critical
CVE-2020-23361
phpList Incorrect Comparison Vulnerability
Critical
CVE-2021-3188
phpList Improper Neutralization of Formula Elements in a CSV File Vulnerability
Critical
CVE-2020-22249
phpList Unrestricted Upload of File with Dangerous Type Vulnerability
Critical
CVE-2017-20029
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2008-6178
phpList Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2020-15072
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2020-35708
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2012-2740
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2017-20030
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2012-3953
phpList Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2020-23209
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23208
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23207
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-15073
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23217
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-20033
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-20034
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-20035
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-20036
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23214
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-36399
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23190
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23192
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-23194
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-36398
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-22251
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2006-5524
phpList Other Vulnerability
Medium
CVE-2012-4246
phpList Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium