CVE-2005-4143

CVE-2005-4143 affects Lyris ListManager versions 5.0 through 8.9a. The vulnerability is a SQL injection that allows a remote attacker to execute arbitrary SQL commands via SQL code appended after a numeric argument in a “/read/attachment” URL. Documented impact indicators in the sources show part...