CVE-2005-4142: Undefined Security Weakness

The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR %0A%0D sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a...

CVE-2005-4144: Undefined Security Weakness

Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as 1 newlines and 2 0xFF ASCII 255 characters, which are interpreted as whitespace...

CVE-2005-4146: Undefined Security Weakness

Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information...

CVE-2005-4145: Undefined Security Weakness

The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space "lyris" and up to 5 digits, possibly from the process ID, which allows remote attackers to gain access via a brute force attack...

[SA17943] Lyris ListManager Multiple Vulnerabilities

TITLE: Lyris ListManager Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17943 VERIFY ADVISORY: http://secunia.com/advisories/17943/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Privilege escalation WHERE: From remote SOFTWARE: Lyris ListManager 7.x...

CVE-2005-4143: Undefined Security Weakness

SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL...

Lyris ListManager Read Message Attachment SQL Injection Exploit

Exploit for unknown platform in category remote exploits =============================================================== Lyris ListManager Read Message Attachment SQL Injection Exploit =============================================================== This file is part of the Metasploit Framework an...

Lyris ListManager - Read Message Attachment SQL Injection (Metasploit)

Lyris ListManager - Read Message Attachment SQL Injection Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the cor...

Lyris List Manager <= 8.8a Multiple Vulnerabilities

Binary data 3324.prm...

Lyris ListManager - Read Message Attachment SQL Injection (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Lyris ListManager MSDE Weak sa Password

This module exploits a weak password vulnerability in the Lyris ListManager MSDE install. During installation, the 'sa' account password is set to 'lminstall'. Once the install completes, it is set to 'lyris' followed by the process ID of the installer. This module brute forces all possible proce...

Lyris List Manager multiple vulnerabilities

No description provided...

Security Contact for Lyris

I am trying to reach the security contact at Lyris www.lyris.com. I sent an email to every address listed on the web site and keep getting blown off by the operator when I call1. The OSVDB Vendor Dictionary has no contact information listed for Lyris. There are a number of serious,...

CVE-2000-0758

The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the listadmin hidden form field...

CVE-2000-0758

The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the listadmin hidden form field...

CVE-2000-0758

The CVE-2000-0758 entry affects Lyris List Manager 3 and 4; the web interface allows subscribers to obtain administrative access by modifying the hidden form field list_admin. Root cause is insufficient server-side validation of this hidden field, enabling privilege escalation from a subscriber. ...

CVE-2000-0758: Undefined Security Weakness

The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the listadmin hidden form field...

lyris.3-4.txt

Versions 3 and 4 of the Lyris List Manager allow any mailing list subscriber to gain access to the administrative interface of that list. After a user has logged in, they may modify the generated web page as follows to gain access: Save the html to disk, and add the full path to the server into t...

Дырка в Lyris List Manager

Возможен доступ к административному интерфейсу путем локальной модификации Wev-страницы...

Lyris List Manager Administration Hole

Versions 3 and 4 of the Lyris List Manager allow any mailing list subscriber to gain access to the administrative interface of that list. After a user has logged in, they may modify the generated web page as follows to gain access: Save the html to disk, and add the full path to the server into t...