CVE-2006-1712

Currently unrated

Key Information:

Vendor
Gnu
Status
Mailman
Vendor
CVE Published:
11 April 2006

Summary

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

References

http://securitytracker.com/id?1015876
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/24442
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/19558
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.