CVE-2005-2432: Tincan Phplist

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

Affected products

• Tincan Phplist: any version

Published 2005-08-03. Last modified 2026-06-16.