PHPList Bounce Rule Persistent cross site scriting
CVE-2017-20036

3.5LOW

Key Information:

Vendor: Unspecified
Status: PHPlist
Vendor: CVE Published:; 10 June 2022

🔔 Create Unspecified Vulnerability Alert

What is CVE-2017-20036?

A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PHPList 3.2.6

References

http://seclists.org/fulldisclosure/2017/Mar/46

x_refsource_MISC

https://vuldb.com/?id.98922

x_refsource_MISC

CVSS V3.1

Score:

3.5

Severity:

LOW

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Jun 10, 2022
Vulnerability Reserved
Jun 5, 2022

Credit

Tim Coen

JSON

Unspecified