CVE-2012-2741 - CVE House

Status published Medium CVE-2012-2741

Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18...

4.3 CVSS

Vulnerability Description

Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a reconcileusers action.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-2741

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from phplist

View All →

CVE-2021-3188

phpList 3.6.0 allows CSV injection, related to the email parameter,...

Critical 9.8

CVE-2020-8547

phpList 3.5.0 allows type juggling for admin login bypass because...

Critical 9.8

CVE-2020-36399

A stored cross site scripting (XSS) vulnerability in phplist 3.5.4...

Medium 5.4

CVE-2020-36398

A stored cross site scripting (XSS) vulnerability in phplist 3.5.4...

Medium 5.4

CVE-2020-35708

phpList 3.5.9 allows SQL injection by admins who provide a...

High 7.2

Affected Vendor

phplist

View all reports →

Affected Software

phplist

Vulnerable Versions:

0, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.10.7, 2.10.8, 2.10.9, 2.10.10, 2.10.11, 2.10.12, 2.10.13, 2.10.14, 2.10.15, 2.10.16

Timeline

Official Publish: September 6th, 2012

Last Modified: September 16th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.