Lyris ListManagerWeb 8.95a Cross Site Scripting

Author: 1N3 Website: http://xerosecurity.com Vender Website: http://lyris.com/us-en/products/listmanager Affected Product: Lyris ListManagerWeb Affected Version: 8.95a ABOUT: Lyris ListManager Lyris LM is an on-premises email marketing software for companies that require the ability to deploy...

Lyris ListManager MSDE Weak sa Password

No description provided by source. $Id: lyrislistmanagerweakpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Lyris ListManager - MSDE Weak sa Password (Metasploit)

$Id: lyrislistmanagerweakpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lyris ListManager MSDE Weak sa Password

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Lyris...

Lyris ListManager MSDE Weak sa Password

This module exploits a weak password vulnerability in the Lyris ListManager MSDE install. During installation, the 'sa' account password is set to 'lminstall'. Once the install completes, it is set to 'lyris' followed by the process ID of the installer. This module brute forces all possible proce...

Lyris ListManager Multiple XSS

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. The installed version fails to properly sanitize user-supplied input to multiple parameters / scripts before using it to generate dynamic HTML output, such as : -...

Cross site scripting

Cross-site scripting XSS vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-2923

Cross-site scripting XSS vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-2923

The CVE-2008-2923 entry documents a Cross-site scripting (XSS) vulnerability in Lyris ListManager (read/search/results) affecting versions 8.8, 8.95, and 9.3d. The underlying issue is failure to sanitize the user-provided words parameter, allowing remote attackers to inject arbitrary HTML/JavaScr...

CVE-2008-2923

Cross-site scripting XSS vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter...

Lyris ListManager read/search/results words Parameter XSS

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. The version of ListManager installed on the remote host fails to sanitize user input to the 'words' parameter of the 'read/search/results' script before including it in dynamic HTML...

ListManager < 9.3b / 9.2c / 8.95d Multiple Vulnerabilities

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. According to its banner, the version of ListManager installed on the remote host relies on client-side code to validate unspecified form parameters before processing them. An attacker wh...

SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2008-001 Advisory Title: Lyris ListManager - Multiple Vulnerabilities Author: Tyler Shields [email protected] Release Date: Wednesday, Januar...

Code injection

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to 1 gain list administrator privileges or 2 access arbitrary mailing lists via unknown vectors related to modification of client-side information; and 3 allow...

CVE-2007-6319

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to 1 gain list administrator privileges or 2 access arbitrary mailing lists via unknown vectors related to modification of client-side information; and 3 allow...

CVE-2007-6319

CVE-2007-6319 affects Lyris ListManager 8.x (before 8.95d), 9.2 (before 9.2c), and 9.3 (before 9.3b). Multiple issues allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists by modifying client-side information, and (3) remote authenticated administr...

CVE-2007-6319

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to 1 gain list administrator privileges or 2 access arbitrary mailing lists via unknown vectors related to modification of client-side information; and 3 allow...

CVE-2006-4547

Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' single quote character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection...

CVE-2006-4546

Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new administrators to any list via a modified MEMBERS.List parameter...

CVE-2006-4547

CVE-2006-4547 affects Lyris ListManager 8.95. The vulnerability arises when an authenticated remote user adds a new user with a name containing a single quote, which can cause the underlying SQL query to be exposed or manipulated, indicating an SQL injection or error-driven information disclosure...