CVE-2011-0707

Currently unrated

Key Information:

Vendor
Gnu
Status
Mailman
Vendor
CVE Published:
22 February 2011

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

References

http://www.vupen.com/english/advisories/2011/0487
vdb-entryx_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2011-0307.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.