Login Request a demo
PH
Vendor
phpList
3 products with CVEs on record
44
CVEs
0
On KEV
0
New 30D
Products
PH
phpList
phpList
9.8
41 CVEs0 on KEV0 new
PH
phplist3
phplist
8.1
2 CVEs0 on KEV0 new
ML
Mailing List Manager
Phplist
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-92806
PH
phpList
phpList
8.1
0%
Sep 16phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
CVE-2026-73482
PH
phplist3
phplist
8.1
0%
Aug 13phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php
CVE-2026-73481
PH
phplist3
phplist
5.4
0%
Aug 13phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2025-28074
PH
Phplist
Phplist
6.1
1%
May 8phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php
CVE-2025-28073
PH
Phplist
Phplist
6.1
1%
May 8phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint
CVE-2023-27576
PH
Phplist
Phplist
6.7
0%
Aug 18An issue was discovered in phpList before 3.6.14
CVE-2017-20036
PH
Phplist
Phplist
5.4
1%
Jun 10A vulnerability, which was classified as problematic, was found in PHPList 3.2.6
CVE-2017-20035
PH
Phplist
Phplist
5.4
1%
Jun 10A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6
CVE-2017-20034
PH
Phplist
Phplist
5.4
1%
Jun 10A vulnerability classified as problematic was found in PHPList 3.2.6
CVE-2017-20033
PH
Phplist
Phplist
6.1
1%
Jun 10A vulnerability classified as problematic has been found in PHPList 3.2.6
CVE-2017-20032
PH
Phplist
Phplist
9.8
1%
Jun 10A vulnerability was found in PHPList 3.2.6
CVE-2017-20031
PH
Phplist
Phplist
2.7
1%
Jun 10A vulnerability was found in PHPList 3.2.6
CVE-2017-20030
PH
Phplist
Phplist
7.2
1%
Jun 10A vulnerability was found in PHPList 3.2.6
CVE-2017-20029
PH
Phplist
Phplist
9.8
21%
Jun 10A vulnerability was found in PHPList 3.2.6 and classified as critical
CVE-2020-22251
PH
Phplist
Phplist
4.8
1%
Jul 6Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin
CVE-2020-22249
PH
Phplist
Phplist
9.8
3%
Jul 6Remote Code Execution vulnerability in phplist 3.5.1
CVE-2020-36399
PH
Phplist
Phplist
5.4
1%
Jul 2A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "rule1"…
CVE-2020-36398
PH
Phplist
Phplist
5.4
1%
Jul 2A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "Campaign"…
CVE-2020-23194
PH
Phplist
Phplist
5.4
1%
Jul 2A stored cross site scripting (XSS) vulnerability in the "Import Subscribers" feature in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or…
CVE-2020-23192
PH
Phplist
Phplist
5.4
1%
Jul 2A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the…
CVE-2020-23190
PH
Phplist
Phplist
5.4
1%
Jul 2A stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a…
CVE-2020-23217
PH
Phplist
Phplist
5.4
1%
Jul 1A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add a list"…
CVE-2020-23214
PH
Phplist
Phplist
5.4
1%
Jul 1A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure…
CVE-2020-23209
PH
Phplist
Phplist
5.4
1%
Jul 1A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "List…
CVE-2020-23208
PH
Phplist
Phplist
5.4
1%
Jul 1A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test"…
CVE-2020-23207
PH
Phplist
Phplist
5.4
1%
Jul 1A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values"…
CVE-2020-23361
PH
Phplist
Phplist
9.8
1%
Jan 27phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively…
CVE-2021-3188
PH
Phplist
Phplist
9.8
2%
Jan 26phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports
CVE-2020-35708
PH
Phplist
Phplist
7.2
1%
Dec 25phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page
CVE-2020-15073
PH
Phplist
Phplist
5.4
1%
Jul 8An issue was discovered in phpList through 3.5.4
CVE-2020-15072
PH
Phplist
Phplist
8.8
1%
Jul 8An issue was discovered in phpList through 3.5.4
CVE-2020-13827
PH
Phplist
Phplist
6.1
1%
Jun 4phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php
CVE-2020-12639
PH
Phplist
Phplist
6.1
1%
May 4phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php
CVE-2020-8547
PH
Phplist
Phplist
9.8
6%
Feb 3phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively…
CVE-2014-2916
PH
Phplist
Phplist
–
1%
May 5Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of…
CVE-2012-2741
PH
Phplist
Phplist
–
3%
Sep 6Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary web script or HTML via the num parameter…
CVE-2012-2740
PH
Phplist
Phplist
–
3%
Sep 6SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands via the sortby parameter in a find…
CVE-2012-4247
PH
Phplist
Phplist
–
2%
Aug 12Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2012-4246
PH
Phplist
Phplist
–
2%
Aug 12Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2012-3953
PH
Phplist
Phplist
–
1%
Aug 12SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the…
CVE-2012-3952
PH
Phplist
Phplist
–
2%
Aug 12Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter…
CVE-2008-6178
PH
Phplist
Phplist
–
8%
Feb 19Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products,…
CVE-2006-5524
PH
Phplist
Phplist
–
2%
Oct 26Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter
CVE-2004-2744
ML
Mailing List Manager
Phplist
–
1%
Dec 31Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."