Description
Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.
References
- RHSA-2001:169 vendor-advisory
- 20011128 Cgisecurity.com Advisory #7: Mailman Email Archive Cross Site Scripting mailing-list
- RHSA-2001:168 vendor-advisory
- RHSA-2001:170 vendor-advisory
- mailman-java-css(7617) vdb-entry
- 3602 vdb-entry
- CLA-2001:445 vendor-advisory