Back to Database
Status published
Medium
CVE-2006-4547
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive...
Vulnerability Description
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4547
Credits & Attribution
No credits recorded in the NVD database.
References
More from lyris
View All →CVE-2014-5188
Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM)...
Medium
4.3
CVE-2008-2923
Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8,...
Medium
4.3
CVE-2007-6319
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2...
Critical
10
CVE-2006-4546
Lyris ListManager 8.95 allows remote authenticated users, who have administrative...
Medium
6.5
CVE-2005-4144
Lyris ListManager 5.0 through 8.9a allows remote attackers to add...
High
7.5
Affected Vendor
lyris
View all reports →Affected Software
list manager
Vulnerable Versions:
8.95
Timeline
Official Publish:
September 6th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.