CVE-2003-0965 in Mailman

Summary

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 11/26/2003
• Disclosure: 02/17/2004
• Moderation: VulDB entry created
• Entries: VDB-21563 (1)
• CPE: ready
• CWE: CWE-80 (Confirmed)
• CVSS: 4.3
• EPSS: 0.03138
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0965
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0965
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0965/