Description

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

Remediation

References

CVE-2006-1712

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33939)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2244)

WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.8.9)

WordPress Plugin Live Forms-Visual Form Builder SQL Injection (3.0.1)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4553)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2006-1712