CVE-2017-15967

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Mailing List Manager Pro version 3.0 is vulnerable to SQL Injection via the edit parameter in the sort=login action or the edit parameter in admin/template.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to update to the latest version of the software and implement input validation and filtering.

Original NVD description (English source)

Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template.