Description

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\'\";><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

Remediation

References

CVE-2017-20033

Related Vulnerabilities

ProjectSend Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-40887)

Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-10345)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-40177)

MySQL CVE-2021-2230 Vulnerability (CVE-2021-2230)

WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)

Severity

Medium

Classification

CVE-2017-20033 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities