312 matches found
CVE-2011-0707
Removed by vendor...
PT-2011-2573
Name of the Vulnerable Software and Affected Versions GNU Mailman versions 2.1.14 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the full name or username field in a confirmation message, potentially leading to cross-site scripting XSS attacks...
CVE-2011-0707: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...
FreeBSD Ports: mailman
The remote host is missing an update to the system as announced in the referenced advisory. VID 4ab29e12-e787-11df-adfa-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4ab29e12-e787-11df-adfa-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Mandriva Linux Security Advisory : mailman (MDVSA-2010:191)
Multiple vulnerabilities has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description...
Mandriva Update for mailman MDVSA-2010:191 (mailman)
Check for the Version of mailman OpenVAS Vulnerability Test Mandriva Update for mailman MDVSA-2010:191 mailman Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2010-3089
Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...
CVE-2010-3089
CVE-2010-3089 affects GNU Mailman, with XSS vulnerabilities in the list information and list description fields reported in versions before 2.1.14rc1. The issue is confirmed in multiple advisories (e.g., MiracleLinux AXSA entries and openSUSE security updates) tying CVE-2010-3089 to Mailman pre-2...
CVE-2010-3089
Removed by vendor...
CVE-2010-3089
Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...
CVE-2010-3089: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description field...
GNU Mailman跨站脚本及拒绝服务漏洞
GNU Mailman是一款开放源码的邮件列表管理系统。 Mailman中存在多个安全漏洞，具体如下： 1 日志功能中的错误允许攻击者通过特制的URL向错误日志中注入欺骗性的日志消息。这可能诱骗管理员访问恶意的Web站点。 2 Mailman在处理畸形MIME首部时没有遵循RFC 2231标准，可能导致拒绝服务。 3 Mailman没有正确过滤某些用户输入，允许在用户浏览器会话中执行任意HTML和脚本代码。 受影响系统： GNU Mailman 2.1.9 不受影响系统： GNU Mailman 2.1.9rc1 GNU Mailman 2.1.9 厂商补丁： GNU ---...
CVE-2006-1712
Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...
CVE-2006-1712
Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...
CVE-2006-1712
CVE-2006-1712 affects GNU Mailman 2.1.7: the private archive script (private.py) is vulnerable to cross-site scripting (XSS) via the action parameter, allowing remote injection of arbitrary script/HTML that could run in a user’s browser within the vulnerable site’s context. The description is cor...
CVE-2006-1712
Removed by vendor...
CVE-2006-1712: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...
Mailman Detection (HTTP)
HTTP based detection of Mailman. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.16338";...