CVE-2005-4142

no score yetEPSS 3.0%

lyris technologies inc listmanager: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.

The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a CRLF injection vulnerability.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-11-01)
Published: 2005-12-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

lyris_technologies_inc:listmanager

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html
http://metasploit.com/research/vulns/lyris_listmanager/
http://secunia.com/advisories/17943
http://www.osvdb.org/21547
http://www.securityfocus.com/archive/1/419077/100/0/threaded

Check your stack JSON