mailman -- Private Archive Script Cross-Site Scripting

ID 8BE2E304-CCE6-11DA-A3B1-00123FFE8333
Type freebsd
Reporter FreeBSD
Modified 2006-04-07T00:00:00


Secunia reports:

A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site.