Описание
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00428
Низкий
6.5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
EPSS
Процентиль: 62%
0.00428
Низкий
6.5 Medium
CVSS2
Дефекты
NVD-CWE-Other