CVE-2005-0157: Smartlist

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.

Affected products

• Smartlist Smartlist: up to and including 3.15

Published 2005-05-03. Last modified 2026-06-16.