CVE-2008-0564 Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates an...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailman | <= 2.1.10b | No fix listed |
| debian/mailman(Debian:10) | < 1:2.1.10~b3-1 | 1:2.1.10~b3-1 |
References
- APPLE-SA-2010-03-29-1 vendor-advisory
- SUSE-SR:2008:017 vendor-advisory
- [Mailman-Announce] 20080203 Mailman 2.1.10b3 Released (was: Re: Mailman 2.1.10b1 Released) mailing-list
- 28794 third-party-advisory vendor-advisory
- 28916 third-party-advisory vendor-advisory
- 28966 third-party-advisory vendor-advisory
- 29249 third-party-advisory vendor-advisory
- 29388 third-party-advisory vendor-advisory
- 31687 third-party-advisory vendor-advisory
- 43549 third-party-advisory vendor-advisory
- sourceforge.net
- support.apple.com
- wiki.rpath.com
- MDVSA-2008:061 vendor-advisory
- RHSA-2011:0307 vendor-advisory
- 20080215 rPSA-2008-0056-1 mailman mailing-list
- 27630 vdb-entry
- USN-586-1 vendor-advisory
- ADV-2008-0422 vdb-entry vendor-advisory
- ADV-2011-0542 vdb-entry vendor-advisory
- bugzilla.redhat.com issue-tracking
- issues.rpath.com
- FEDORA-2008-1334 vendor-advisory