CVE-2005-4149

Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.

Published: Dec 10, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-4149
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
lyris_technologies_inc / listmanager	5.0	5.0.x
lyris_technologies_inc / listmanager	8.0	8.0.x
lyris_technologies_inc / listmanager	8.8a	8.8a.x
lyris_technologies_inc / listmanager	6.0	6.0.x
lyris_technologies_inc / listmanager	7.0	7.0.x

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.securityfocus.com/archive/1/419077/100/0/threaded
http://www.vupen.com/english/advisories/2005/2820

Vulnerability Database

289,697

CVE-2005-4149