5
CVE-2005-4149
- EPSS 1.39%
- Veröffentlicht 10.12.2005 11:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:15
- Erkennungen
LoginLyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lyris Technologies Inc ≫ Listmanager Version 5.0
Lyris Technologies Inc ≫ Listmanager Version 6.0
Lyris Technologies Inc ≫ Listmanager Version 7.0
Lyris Technologies Inc ≫ Listmanager Version 8.0
Lyris Technologies Inc ≫ Listmanager Version 8.8a
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.39% | 0.687 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.securityfocus.com/archive/1/419077/100/0/threaded
http://www.vupen.com/english/advisories/2005/2820