Description

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

Remediation

References

CVE-2004-1177

Related Vulnerabilities

WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Cross-Site Scripting (3.9.4)

Java Unspesificed Vulnerability (CVE-2019-2786)

Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4184)

MySQL CVE-2022-21337 Vulnerability (CVE-2022-21337)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16633)

Severity

Medium

Classification

CVE-2004-1177

Tags

Missing Update Known Vulnerabilities