CVE-2007-6319: Lyris List Manager

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."

Affected products

• Lyris List Manager: version 8.95 only; version 8.95a only; version 8.95b only; version 8.95c only; version 9.2 only; version 9.2a only; …

Published 2008-02-19. Last modified 2026-06-16.