CVE-2008-0564 in Mailmaninfo

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list s "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

02/04/2008

Disclosure

02/04/2008

Entries

1: VDB-40825

CPE

ready

CVSS

4.3

EPSS

0.02408

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!