CVE-2003-0992 in Mailman

Summary

Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/16/2003
• Disclosure: 02/17/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-21566
• CPE: ready
• CWE: CWE-80 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00553
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0992
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0992
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0992/