{"api_version":"1","generated_at":"2026-07-24T19:35:28+00:00","cve":"CVE-2005-3555","urls":{"html":"https://cve.report/CVE-2005-3555","api":"https://cve.report/api/cve/CVE-2005-3555.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3555","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3555"},"summary":{"title":"CVE-2005-3555","description":"Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-11-16 07:42:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/15350","name":"http://www.securityfocus.com/bid/15350","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PHPList Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/20567","name":"http://osvdb.org/20567","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2005/2345","name":"http://www.vupen.com/english/advisories/2005/2345","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/20568","name":"http://osvdb.org/20568","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/17476","name":"http://secunia.com/advisories/17476","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Secunia - Advisories - phplist Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/416005/30/0/threaded","name":"http://www.securityfocus.com/archive/1/416005/30/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt","name":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3555","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3555","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3555","vulnerable":"1","versionEndIncluding":"2.10.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tincan","cpe5":"phplist","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:17:23.580Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt"},{"name":"20051107 [TKADV2005-11-001] Multiple vulnerabilities in PHPlist","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/416005/30/0/threaded"},{"name":"ADV-2005-2345","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2345"},{"name":"20568","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/20568"},{"name":"20567","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/20567"},{"name":"17476","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17476"},{"name":"15350","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15350"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-11-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt"},{"name":"20051107 [TKADV2005-11-001] Multiple vulnerabilities in PHPlist","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/416005/30/0/threaded"},{"name":"ADV-2005-2345","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2345"},{"name":"20568","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/20568"},{"name":"20567","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/20567"},{"name":"17476","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17476"},{"name":"15350","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15350"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3555","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt","refsource":"MISC","url":"http://www.trapkit.de/advisories/TKADV2005-11-001.txt"},{"name":"20051107 [TKADV2005-11-001] Multiple vulnerabilities in PHPlist","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/416005/30/0/threaded"},{"name":"ADV-2005-2345","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2345"},{"name":"20568","refsource":"OSVDB","url":"http://osvdb.org/20568"},{"name":"20567","refsource":"OSVDB","url":"http://osvdb.org/20567"},{"name":"17476","refsource":"SECUNIA","url":"http://secunia.com/advisories/17476"},{"name":"15350","refsource":"BID","url":"http://www.securityfocus.com/bid/15350"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3555","datePublished":"2005-11-16T07:37:00.000Z","dateReserved":"2005-11-16T00:00:00.000Z","dateUpdated":"2024-08-07T23:17:23.580Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-11-16 07:42:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.1","matchCriteriaId":"11661E35-EB3F-4506-BD01-862966F11BF8"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3555","Ordinal":"1","Title":"CVE-2005-3555","CVE":"CVE-2005-3555","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3555","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.","Type":"Description","Title":"CVE-2005-3555"},{"CveYear":"2005","CveId":"3555","Ordinal":"2","NoteData":"2005-11-16","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"3555","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}