PHPList Security Bypass and Information Disclosure Vulnerabilities

Bugtraq ID:	49188
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 15 2011 12:00AM
Updated:	Aug 15 2011 12:00AM
Credit:	Davide Canali
Vulnerable:	PHPList PHPList 2.10.14 PHPList PHPList 2.10.8 PHPList PHPList 2.10.7 PHPList PHPList 2.10.6 PHPList PHPList 2.10.5 PHPList PHPList 2.10.4 PHPList PHPList 2.10.3 PHPList PHPList 2.10.2 PHPList PHPList 2.10.1 PHPList PHPList 2.10.13
Not Vulnerable:	PHPList PHPList 2.10.17

PHPList Security Bypass and Information Disclosure Vulnerabilities

PHPList is prone to a security-bypass vulnerability and an information-disclosure vulnerability.

An attacker can exploit these issues to gain access to sensitive information and send arbitrary messages to registered users. Other attacks are also possible.

PHPList Security Bypass and Information Disclosure Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.

The following example request is available:

http://www.example.com/lists/?p=forward&uid=VALID_UID&mid=ID
http://www.example.com/lists/?p=forward&uid=foo&mid=ID

PHPList Security Bypass and Information Disclosure Vulnerabilities

Solution:
The vendor released an update for the security bypass issue. Please see the references for details.

Currently we are not aware of any vendor-supplied patches for the information-disclosure issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHPList Security Bypass and Information Disclosure Vulnerabilities

References:

• PHPList Homepage (PHPList)
  
• phpList Improper Access Control and Information Leakage vulnerabilities To: bugt (Davide Canali )