EndymionMailman Webmail
3 matches found
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...
10CVSS7.7AI score0.13461EPSS
SaveWeb
CVE-1999-0850
CVE-1999-0850 affects Endymion MailMan. The vulnerability arises from default permissions that let local users read email or modify files, implying local access and partial confidentiality/integrity impact. The provided documents do not specify a patch, workaround, affected versions, or exploit d...
3.6CVSS6.7AI score0.00324EPSS
Save