Mailman: Three XSS flaws due improper escaping of the full name of the member

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

Mailman: Three XSS flaws due improper escaping of the full name of the member

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

mailman: XSS triggerable by list administrator

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

mailman security update

3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707...

Mandriva Update for mailman MDVSA-2011:036 (mailman)

Check for the Version of mailman OpenVAS Vulnerability Test Mandriva Update for mailman MDVSA-2011:036 mailman Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for mailman vulnerabilities USN-1069-1

Ubuntu Update for Linux kernel vulnerabilities USN-1069-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10691.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mailman vulnerabilities USN-1069-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Mandriva Update for mailman MDVSA-2011:036 (mailman)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2011:036 ] mailman

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:036 http://www.mandriva.com/security/ Package : mailman Date : February 23, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...

Mandriva Linux Security Advisory : mailman (MDVSA-2011:036)

A vulnerability has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mailman vulnerabilities (USN-1069-1)

It was discovered that Mailman did not properly sanitize certain fields, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to...

USN-1069-1: Mailman vulnerabilities

It was discovered that Mailman did not properly sanitize certain fields, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to...

CVE-2011-0707

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

CVE-2011-0707

CVE-2011-0707 is a cross-site scripting (XSS) vulnerability in GNU Mailman 2.1.14 and earlier, specifically in Cgi/confirm.py, where remote attackers can inject arbitrary script or HTML via the full name or username in a confirmation message. Multiple Nessus/MiracleLinux open-source advisories re...

CVE-2011-0707

Removed by vendor...

Debian DSA-2170-1 : mailman - several vulnerabilities

Two cross site scripting vulnerabilities were been discovered in Mailman, a web-based mailing list manager. These allowed an attacker to retrieve session cookies via inserting crafted JavaScript into confirmation messages CVE-2011-0707 and in the list admin interface CVE-2010-3089; oldstable only...