CVE-2005-4149

high

Description

Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.

References

http://www.vupen.com/english/advisories/2005/2820

http://www.securityfocus.com/archive/1/419077/100/0/threaded

http://secunia.com/advisories/17943

http://metasploit.com/research/vulns/lyris_listmanager/

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html

Details

Source: Mitre, NVD

Published: 2005-12-10

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High