CVE-2006-5322: Tincan Phplist

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Tincan Phplist: up to and including 2.10.2; version 2.8.12 only; version 2.9.3 only; version 2.9.4 only; version 2.9.5 only; version 2.10.1 only

Published 2006-10-17. Last modified 2026-06-16.