1611 matches found
mailman -- hardening against malicious listowners injecting evil HTML scripts
Mark Sapiro reports: Existing protections against malicious listowners injecting evil scripts into listinfo pages have had a few more checks added. A few more error messages have had their values HTML escaped. The hash generated when SUBSCRIBEFORMSECRET is set could have been the same as one...
Debian: Security Advisory (DLA-1272-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4108-1 : mailman - security update
Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster. C Tenable Network...
[SECURITY] [DSA 4108-1] mailman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4108-1] mailman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1272-1] mailman security update
Package : mailman Version : 1:2.1.15-1+deb7u3 CVE ID : CVE-2018-5950 Debian Bug : 888201 The mailman package has a Cross-site scripting XSS vulnerability in the web UI before 2.1.26 which allows remote attackers to inject arbitrary web script or HTML via a user-options URL For Debian 7 "Wheezy",...
DLA-1272-1 mailman - security update
Bulletin has no description...
DSA-4108-1 mailman - security update
Bulletin has no description...
Debian DLA-1272-1 : mailman security update
The mailman package has a Cross-site scripting XSS vulnerability in the web UI before 2.1.26 which allows remote attackers to inject arbitrary web script or HTML via a user-options URL For Debian 7 'Wheezy', these problems have been fixed in version 1:2.1.15-1+deb7u3 We recommend that you upgrade...
Ubuntu 14.04 LTS / 16.04 LTS : Mailman vulnerability (USN-3563-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3563-1 advisory. It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code. Tenable has...
FreeBSD : Mailman -- XSS (XSS) vulnerability in the web UI (3d0eeef8-0cf9-11e8-99b0-d017c2987f9a)
Mark Sapiro reports : An XSS vulnerability in the user options CGI could allow a crafted URL to execute arbitrary JavaScript in a user's browser. A related issue could expose information on a user's options page without requiring login. C Tenable Network Security, Inc. The descriptive text and...
USN-3563-1 mailman vulnerability
It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code...
USN-3563-1: Mailman vulnerability
It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code...
Debian: Security Advisory (DSA-4108-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mailman < 2.1.26 XSS Vulnerability
Mailman is prone to a cross-site scripting XSS vulnerability in the web UI. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Mailman Cross-Site Scripting Vulnerability
Mailman is a set of shareware developed in the Python language that allows you to manage mailing lists.Web UI is one of the web management interfaces. A cross-site scripting vulnerability exists in the Web UI of Mailman versions prior to 2.1.26. A remote attacker can exploit this vulnerability to...
CVE-2018-5950
Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...
CVE-2018-5950
Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...
