CVE-2005-4143: High – SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a

◆ AI Analysis — automated analysis, not human-reviewed

{ "executive_summary": "A SQL injection vulnerability in Lyris ListManager versions 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation.", "attack_vector_detail": "The vulnerability is exploited by injecting SQL code after a numeric argument in the /read/attachment URL, enabling attackers to manipulate the database queries and execute arbitrary SQL commands.", "affected_components": ["Lyris ListManager 5.0", "Lyris ListManager 5.1", "Lyris ListManager 5.2", "Lyris ListManager 5.3", "Lyris ListManager 5.4", "Lyris ListManager 5.5", "Lyris ListManager 5.6", "Lyris ListManager 5.7", "Lyris ListManager 5.8", "Lyris ListManager 5.9", "Lyris ListManager 6.0", "Lyris ListManager 6.1", "Lyris ListManager 6.2", "Lyris ListManager 6.3", "Lyris ListManager 6.4", "Lyris ListManager 6.5

BSID: BS-2005-GLOBAL-172371-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2005-4143?

{ "executive_summary": "A SQL injection vulnerability in Lyris ListManager versions 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation.", "attack_vector_detail": "The vulnerability is exploited by injecting SQL code after a numeric argument in the /read/attachment URL, enabling attackers to manipulate the database queries and execute arbitrary SQL commands.", "affected_components": ["Lyris ListManager

What is the CVSS score for CVE-2005-4143?

CVE-2005-4143 has CVSS 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. EPSS: 1.4%.

Is CVE-2005-4143 actively exploited?

Public exploit available for CVE-2005-4143. Exploitation risk elevated.

How do I remediate CVE-2005-4143?

PSIRT: [email protected]

What systems are affected by CVE-2005-4143?

CVE-2005-4143 affects Lyris List Manager.

Vulnerability Details

CVE ID	`CVE-2005-4143`
BSID	`BS-2005-GLOBAL-172371-H` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:P/I:P/A:P`
Published	2005-12-10
Last Modified	2026-06-16
ICS Relevance	0%
Source	NVD

Official Description

SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL.

Source: NIST NVD / MITRE CVE Database

Affected Products

Vendor	Product	Affected Versions
Lyris	List Manager	`5.0` `6.0` `7.0` `8.0` `8.8a`

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 7614 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	⚠ Available — Reference
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`/workspace/models/qwen2.5-coder-32b-instruct-bf16`
Enriched At	2026-05-25

Related CVEs affecting Lyris

CVE-2007-6319 10.0 Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9... CVE-2005-4144 7.5 Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" ... CVE-2006-4547 6.5 Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive ... CVE-2006-4546 6.5 Lyris ListManager 8.95 allows remote authenticated users, who have administra... CVE-2000-0758 4.6 The web interface for Lyris List Manager 3 and 4 allows list subscribers to o...

View all Lyris CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →