Description
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
References
- 1016771 vdb-entry
- 20060831 Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list mailing-list
- 1502 third-party-advisory
- 20060831 Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list mailing-list