1492 matches found
CVE-2002-0388
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via 1 the admin login page, or 2 the Pipermail index summaries...
CVE-2002-0388
CVE-2002-0388 affects Mailman releases prior to 2.0.11, enabling remote XSS via the admin login page or Pipermail index summaries. The root cause is cross-site scripting in Mailman’s web interfaces. Public advisories and OpenVAS/Nessus entries corroborate a fix in 2.0.11 (debian/DSA-147-1/DSA-147...
CVE-2002-0277
Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter...
CVE-2002-0388
Removed by vendor...
GNU Mailman 2.0.x - Admin Login Cross-Site Scripting
source: https://www.securityfocus.com/bid/4825/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code. A user visiting the link will have the attacker's script co...
CVE-2002-0277
CVE-2002-0277 affects Add2it Mailman Free versions 1.73 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the list parameter. This is evidenced by the NVD entry and associated descriptions. The connected documents confirm the...
CVE-2002-0278
CVE-2002-0278: Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier enables remote attackers to modify arbitrary files via a .. in the list parameter. Affected product: Add2it Mailman Free (version 1.73 and earlier). Root cause: improper handling of directory traversal in the...
CVE-2002-0277
Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter...
CVE-2002-0278
Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. dot dot in the list parameter...
Mailman/Pipermail private mailing list/local user vulnerability
There is a vulnerability in Pipermail mailing list archiving software distributed with and integrated with Mailman, that affects you if you have local users on the machine. If you have a private Mailman mailing lists and b user logins on the same machine, any local user can read the archives of...
Endymion SakeMail and MailMan File Disclosure Vulnerability
Product: Mailman - Webmailsystem http://www.endymion.com Problem Description: due to missing input-validation it is possible to read files with the webservers or mailmans permissions a similar pretty much the same bug was discovered 2 years ago from "secureality"...
Add2it Mailman command execution
!/exploit/by/b0iler Add2it Mailman Free V1.73 script url: http://www.add2it.com/scripts/mailman-free.shtml The problem is that the script does not filter input well: $command = $ENV'QUERYSTRING'; $list, $email = split/=/,$command; and then the script makes an open call based on input from the use...
CVE-2001-0884
Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users...
[SECURITY] [DSA-094-1] mailman cross-site scripting problem
Package : mailman Problem type : cross-site scripting hole Debian-specific: no Barry A. Warsaw reported several cross-site scripting security holes in Mailman, due to non-existent escaping of CGI variables. These have been fixed upstream in version 2.0.8, and the relevant patches have been...
Cgisecurity.com Advisory #7: Mailman Email Archive Cross Site Scripting
Hello, This isn't a major threat or anything but this product does allow cross site scripting. From the list of sites below as examples you get an idea of just how popular this product is. http://www1.dshield.org/mailman/listinfo/img20src=javascript:alertdocument.domain...
CVE-2001-1132
Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...
CVE-2001-0290
Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...