CVE-2014-5188

概要

参考情報

• packetstormsecurity.com/files/127672/Lyris-ListManagerWeb-8.95a-Cross-Site-Scripting.html · Exploit
• securityfocus.com/bid/68973 · Exploit
• xerosecurity.com
• exchange.xforce.ibmcloud.com/vulnerabilities/95024

list manager のその他の脆弱性

• CVE-2008-2923中 4.3Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject a…
• CVE-2007-6319緊急 10.0Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (…
• CVE-2006-4547中 6.5Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote)…
• CVE-2006-4546中 6.5Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new…
• CVE-2005-4144高 7.5Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the…