Description

Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.

Remediation

References

CVE-2015-2775

Related Vulnerabilities

WordPress Plugin WordPress Contact Forms by Cimatti Cross-Site Scripting (1.4.11)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2009-1149)

WordPress Plugin Infographic Maker-iList Unspecified Vulnerability (2.7.0)

WordPress Ultimate Member Plugin CVE-2019-10271 Vulnerability (CVE-2019-10271)

WordPress Plugin Flipbox-Awesomes Flip Boxes Image Overlay Security Bypass (2.6.0)

Severity

High

Classification

CVE-2015-2775 CWE-22

Tags

Missing Update Known Vulnerabilities