CVE

Id
15348  
CVE No.
CVE-2005-4144  
Status
Candidate  
Description
Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace.  
Phase
Assigned (20051210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120035 15348 CVE-2005-4144 FULLDISC:20051208 PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer  View
120036 15348 CVE-2005-4144 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html  View
120037 15348 CVE-2005-4144 BUGTRAQ:20051209 PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer  View
120038 15348 CVE-2005-4144 URL:http://www.securityfocus.com/archive/1/archive/1/419077/100/0/threaded  View
120039 15348 CVE-2005-4144 MISC:http://metasploit.com/research/vulns/lyris_listmanager/  View
120040 15348 CVE-2005-4144 BID:15787  View
120041 15348 CVE-2005-4144 URL:http://www.securityfocus.com/bid/15787  View
120042 15348 CVE-2005-4144 VUPEN:ADV-2005-2820  View
120043 15348 CVE-2005-4144 URL:http://www.vupen.com/english/advisories/2005/2820  View
120044 15348 CVE-2005-4144 OSVDB:21549  View
120045 15348 CVE-2005-4144 URL:http://www.osvdb.org/21549  View
120046 15348 CVE-2005-4144 SECUNIA:17943  View

Related JVN