CVE-2005-4149

Description

References

• archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
• metasploit.com/research/vulns/lyris_listmanager
• secunia.com/advisories/17943 · Vendor Advisory
• securityfocus.com/archive/1/419077/100/0/threaded
• vupen.com/english/advisories/2005/2820

listmanager 的其他漏洞

• CVE-2005-4148中危 5.0Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remot…
• CVE-2005-4147中危 6.5The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a…
• CVE-2005-4146中危 5.0Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which pro…
• CVE-2005-4145中危 6.5The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space…
• CVE-2005-4142高危 7.5The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote at…