Launchpad.net

CVE 2006-5322

Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

See the CVE page on Mitre.org for more details.