Description

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

Remediation

References

CVE-2006-1712

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)

WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)

MySQL CVE-2018-3063 Vulnerability (CVE-2018-3063)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Request Forgery (4.2.3.1)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12823)

Severity

Low

Classification

CVE-2006-1712

Tags

Missing Update Known Vulnerabilities