Arbitrary Web Script Injection Vulnerability in phpList 2.10.19

CVE-2012-3952 · LOW Severity

AV:N/AC:H/AU:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page.

Learn more about our Web App Pen Testing.