CVE-2005-4143

Published: Dec 10, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL.

Affected (5)

Products: Lyris: List Manager

Lyris

1 product

List Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Lyris List Manager	Version 5.0
Lyris List Manager	Version 6.0
Lyris List Manager	Version 7.0
Lyris List Manager	Version 8.0
Lyris List Manager	Version 8.8a

References (14)

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html

Source: cve@mitre.org

http://metasploit.com/research/vulns/lyris_listmanager/

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/17943

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21548

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/archive/1/419077/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15787

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2005/2820

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html