Lucene search
MitreCVE-2006-4547HistorySep 06, 2006 - 12:04 a.m.
CVE-2006-4547
2006-09-0600:04:00
mitre
web.nvd.nist.gov
19
lyris listmanager
sql injection
cve-2006-4547
information security
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
47.5%
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ’ (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
Affected configurations
Node
lyrislist_managerMatch8.95
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lyris | list_manager | 8.95 | cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:* |
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
47.5%
Related for CVE-2006-4547