Description
An issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission.
Remediation
References
Related Vulnerabilities
XWiki Incorrect Use of Privileged APIs Vulnerability (CVE-2022-24821)
WordPress Plugin WordPress Console Security Bypass (0.3.9)
Plone CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7293)
Joomla! Core 1.6.x Security Bypass (1.6.0 - 1.6.6)
Oracle Database Server CVE-2012-0528 Vulnerability (CVE-2012-0528)