Description

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

Remediation

References

CVE-2004-1177

Related Vulnerabilities

Open Resty Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9230)

WordPress 4.3.x Cross-Site Request Forgery (4.3 - 4.3.18)

WordPress Plugin LeadConnector Security Bypass (1.7)

Oracle Application Server Other Vulnerability (CVE-2006-5362)

WordPress Plugin WR ContactForm SQL Injection (1.1.9)

Severity

Medium

Classification

CVE-2004-1177

Tags

Missing Update Known Vulnerabilities