CVE-2007-6319 - CVE House
Back to Database
Status published Critical CVE-2007-6319

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2...

Vulnerability Description

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6319

Credits & Attribution

No credits recorded in the NVD database.

References

More from lyris

View All →
CVE-2014-5188
Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM)...
Medium 4.3
CVE-2008-2923
Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8,...
Medium 4.3
CVE-2006-4547
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive...
Medium 6.5
CVE-2006-4546
Lyris ListManager 8.95 allows remote authenticated users, who have administrative...
Medium 6.5
CVE-2005-4144
Lyris ListManager 5.0 through 8.9a allows remote attackers to add...
High 7.5

Affected Vendor

Affected Software

list manager
Vulnerable Versions:
8.95, 8.95a, 8.95b, 8.95c, 9.2, 9.2a, 9.2b, 9.3, 9.3a

Timeline

Official Publish: February 19th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.