CVE-2003-0965

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-m48m-qqmr-226c

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows...

References (20)

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
• http://mail.python.org/pipermail/mailman-announce/2003-December/000066.html Patch, Vendor Advisory
• http://secunia.com/advisories/10519
• http://www.debian.org/security/2004/dsa-436
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:013
• http://www.osvdb.org/3305
• http://www.redhat.com/support/errata/RHSA-2004-020.html Patch, Vendor Advisory
• http://www.securityfocus.com/bid/9336 Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14121
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A813
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
• http://mail.python.org/pipermail/mailman-announce/2003-December/000066.html Patch, Vendor Advisory
• http://secunia.com/advisories/10519
• http://www.debian.org/security/2004/dsa-436
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:013