CVE-2007-6319

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-19 · updated 2026-06-16
Weakness: CWE-264

Description

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."

Affected products

Lyris List Manager: 8.95, 8.95a, 8.95b, 8.95c, 9.2, 9.2a (+3)

References

http://secunia.com/advisories/29019
http://securityreason.com/securityalert/3671
http://securitytracker.com/id?1019436
http://www.securityfocus.com/archive/1/488343/100/0/threaded
http://www.securityfocus.com/bid/26792
http://www.vupen.com/english/advisories/2008/0618
http://secunia.com/advisories/29019
http://securityreason.com/securityalert/3671
http://securitytracker.com/id?1019436
http://www.securityfocus.com/archive/1/488343/100/0/threaded
http://www.securityfocus.com/bid/26792
http://www.vupen.com/english/advisories/2008/0618

Get alerted when CVE-2007-6319 or the next vulnerability affects your stack