VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 6, 2006· Updated Jun 16, 2026

CVE-2006-4547

CVE-2006-4547

Description

Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.

Affected products

2
  • Lyris/Listmanager2 versions
    cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*
    • (no CPE)range: = 8.95

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.