Vulnerabilities > CVE-2006-4547 - Unspecified vulnerability in Lyris List Manager 8.95

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
lyris
NVD
Published: 2006-09-06
Updated: 2024-11-21

Summary

Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.

Vulnerable Configurations

Part Description Count
Application
Lyris
1

References