The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field.
Affected Software
Name |
Vendor |
Start Version |
End Version |
List_manager |
Lyris |
3.0 |
3.0 |
List_manager |
Lyris |
4.0 |
4.0 |
References