Approved changes feed: RSS · Atom

cpe:2.3:a:phplist:phplist:3.0.3:*:*:*:*:*:*:*

part: a version: 3.0.3 update: *

VendorPhplist (c06ea4cf-421e-57d6-97f6-16bef961c27a)
ProductPhplist (dccc7946-c80c-5ab0-9d5e-4bdece2d2b9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/phplist/core purl2cpe 2026-06-01 10:11:23.437619
pkg:sourceforge/phplist purl2cpe 2026-06-01 10:11:23.437620

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2916 vulnerable 2026-06-08 05:05:30.343123 Details available
Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/.
Published: 2014-05-05T16:00:00.000Z
Updated: 2024-08-06T10:28:46.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.