GCVE - cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Smartisoft (`dcfafbc9-2bf0-5c6b-abe2-edfed6075827`)
Product	Phplistpro (`bda6edc1-9eac-547f-b2fc-6ec714db0ee1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2523`	vulnerable	2026-06-08 04:49:07.011961	Details available PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie. Published: 2006-05-22T22:00:00.000Z Updated: 2024-08-07T17:51:04.696Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1894 https://www.exploit-db.com/exploits/1805 http://www.osvdb.org/25694 https://exchange.xforce.ibmcloud.com/vulnerabilities/26621 http://secunia.com/advisories/20220	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2323`	vulnerable	2026-06-08 04:49:06.326840	Details available Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749. Published: 2006-05-12T00:00:00.000Z Updated: 2024-08-07T17:43:29.275Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/882 http://securityreason.com/securityalert/688 http://securityreason.com/securityalert/156 http://securitytracker.com/id?1016060 https://exchange.xforce.ibmcloud.com/vulnerabilities/26359	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1749`	vulnerable	2026-06-08 04:48:57.978495	Details available PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter. NOTE: this issue was later reported to affect 2.01 as well. Published: 2006-04-12T22:00:00.000Z Updated: 2024-08-07T17:27:27.684Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/430614 https://exchange.xforce.ibmcloud.com/vulnerabilities/25760 http://www.securityfocus.com/archive/1/433562/100/0/threaded http://www.osvdb.org/24540 http://www.securityfocus.com/bid/17448	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.