CVE-2005-4149

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-10 · updated 2026-06-16

Description

Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.

Affected products

Lyris Technologies Inc Listmanager: 5.0, 6.0, 7.0, 8.0, 8.8a

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.securityfocus.com/archive/1/419077/100/0/threaded
http://www.vupen.com/english/advisories/2005/2820
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.securityfocus.com/archive/1/419077/100/0/threaded
http://www.vupen.com/english/advisories/2005/2820

Get alerted when CVE-2005-4149 or the next vulnerability affects your stack