Login Request a demo
Unscored severity · published Feb 19, 2008
CVE-2007-6319
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LM
List Manager · Lyris
8.95; 8.95a; 8.95b; 8.95c; 9.2; 9.2a; +3 more · source: NVD
Affected product
LM
List Manager
Lyris
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6319
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6319
secunia.com
http://secunia.com/advisories/29019
securityreason.com
http://securityreason.com/securityalert/3671
securitytracker.com
http://securitytracker.com/id?1019436
www.securityfocus.com
http://www.securityfocus.com/archive/1/488343/100/0/threaded
Patch
http://www.securityfocus.com/bid/26792
www.vupen.com
http://www.vupen.com/english/advisories/2008/0618
More from List Manager
–
CVE-2014-5188
Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr…
–
CVE-2008-2923
Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the…
–
CVE-2006-4547
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals…
–
CVE-2006-4546
Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new administrators to any list via a…
–
CVE-2005-4144
Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1)…