Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lyris ListManager 敏感信息泄露漏洞
Vulnerability Description
Lyris ListManager 8.95可让远程认证的用户通过尝试添加名称中含有'(单引号)字符的用户来揭示基础SQL查询的详细信息(可能是因为强制的SQL错误或SQL注入)，以此获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A