Lyris ListManager Multiple SQL Injection Vulnerabilities
BID:15787
Info
Lyris ListManager Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 15787 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2005 12:00AM |
| Updated: | Dec 09 2005 12:00AM |
| Credit: | H D Moore is credited with the discovery of this vulnerability. |
| Vulnerable: |
Lyris List Manager 8.8 a Lyris List Manager 8.0 Lyris List Manager 7.0 Lyris List Manager 6.0 Lyris List Manager 5.0 |
| Not Vulnerable: |
Lyris List Manager 8.9 b |
Discussion
Lyris ListManager Multiple SQL Injection Vulnerabilities
Lyris ListManager is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Lyris ListManager is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
Lyris ListManager Multiple SQL Injection Vulnerabilities
No exploit is required.
A sample exploit has been provided.
No exploit is required.
A sample exploit has been provided.
Solution / Fix
Lyris ListManager Multiple SQL Injection Vulnerabilities
Solution:
The vendor has released version 8.9b to resolve these issues. Please contact the vendor for further details.
Solution:
The vendor has released version 8.9b to resolve these issues. Please contact the vendor for further details.
References
Lyris ListManager Multiple SQL Injection Vulnerabilities
References:
References:
- List Manager Homepage (Lyris)
- Lyris Listmanager Multiple Vulnerabilities (Metasploit)