The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a CRLF injection vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Listmanager | Lyris_technologies_inc | 5.0 (including) | 5.0 (including) |
| Listmanager | Lyris_technologies_inc | 6.0 (including) | 6.0 (including) |
| Listmanager | Lyris_technologies_inc | 7.0 (including) | 7.0 (including) |
| Listmanager | Lyris_technologies_inc | 8.0 (including) | 8.0 (including) |
| Listmanager | Lyris_technologies_inc | 8.8a (including) | 8.8a (including) |