GNU Mailman 2.0.x Admin Login Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4825/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code. A user visiting the link...

GNU Mailman 2.1 'email' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6677/info A vulnerability has been discovered in GNU Mailman. It has been reported that Mailman is prone to cross site scripting attacks. This is due to insufficient santization of URI parameters. As a result, attackers m...

GNU Mailman 2.0.x Admin Login Variant Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5299/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code. A user visiting the link...

GNU Mailman 2.0.x Subscribe Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5298/info GNU Mailman is prone to a cross-site scripting vulnerability. Arbitrary HTML and script code are not sanitized from the URI parameters of mailing list subscribe scripts. An attacker may exploit this issue by...

GNU Mailman 2.1 Error Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6678/info A vulnerability has been discovered in GNU Mailman. The issue occurs to insufficient sanitization of user-supplied data which is output when generating error pages. As a result, attackers may embed malicious...

FreeBSD : mailman -- XSS vulnerability (64691c49-4b22-11e0-a226-00e0815b8da8)

CVE reports : Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mailman: Three XSS flaws due improper escaping of the full name of the member

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

Mandriva Update for mailman MDVSA-2011:036 (mailman)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : mailman (MDVSA-2011:036)

A vulnerability has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

CVE-2011-0707

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

CVE-2011-0707

CVE-2011-0707 is a cross-site scripting (XSS) vulnerability in GNU Mailman 2.1.14 and earlier, specifically in Cgi/confirm.py, where remote attackers can inject arbitrary script or HTML via the full name or username in a confirmation message. Multiple Nessus/MiracleLinux open-source advisories re...

CVE-2011-0707

Removed by vendor...

FreeBSD Ports: mailman

The remote host is missing an update to the system as announced in the referenced advisory. VID 4ab29e12-e787-11df-adfa-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4ab29e12-e787-11df-adfa-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Mandriva Linux Security Advisory : mailman (MDVSA-2010:191)

Multiple vulnerabilities has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description...

Mandriva Update for mailman MDVSA-2010:191 (mailman)

Check for the Version of mailman OpenVAS Vulnerability Test Mandriva Update for mailman MDVSA-2010:191 mailman Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2010-3089

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...

CVE-2010-3089

CVE-2010-3089 affects GNU Mailman, with XSS vulnerabilities in the list information and list description fields reported in versions before 2.1.14rc1. The issue is confirmed in multiple advisories (e.g., MiracleLinux AXSA entries and openSUSE security updates) tying CVE-2010-3089 to Mailman pre-2...

CVE-2010-3089

Removed by vendor...

CVE-2010-3089

Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...