Skip to content
Threat Feed
Subscribe

Product

PhpList (< 3.7.0-RC5)

1 brief RSS
high threat

Cross-Site Request Forgery in phpList Administrator Deletion

A CSRF vulnerability in phpList versions prior to 3.7.0-RC5 allows authenticated administrators to be tricked into deleting other administrator accounts via a crafted GET request.

exploited phpList web-vulnerability csrf php
1c