CVE-2005-4144

Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter…

published December 10, 2005

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01760 · 77.7th percentile
Published
2005-12-10T11:00Z
EPSS history
Timeline
  • 10 DEC 11:00Z
    Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter…
    cvelistv5