CVE-2014-5188 - Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter

Published Aug 7, 2014

4.3

MEDIUM

CVSS 2.0

EPSS 1.85%

Description

Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://packetstormsecurity.com/files/127672/Lyris-ListManagerWeb-8.95a-Cross-Site-Scripting.html
x_refsource_MISCExploit
http://www.securityfocus.com/bid/68973
vdb-entryx_refsource_BIDExploit
http://xerosecurity.com/?p=94
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-5086
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95024
vdb-entryx_refsource_XF

Link	Providers	Tags
http://packetstormsecurity.com/files/127672/Lyris-ListManagerWeb-8.95a-Cross-Site-Scripting.html		x_refsource_MISCExploit
http://www.securityfocus.com/bid/68973		vdb-entryx_refsource_BIDExploit
http://xerosecurity.com/?p=94		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-5086		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95024		vdb-entryx_refsource_XF