CVE-2003-0038

Advisory

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt
• http://www.debian.org/security/2004/dsa-436
• http://www.securityfocus.com/bid/6677
• http://www.osvdb.org/9205
• http://www.securitytracker.com/id?1005987
• http://marc.info/?l=bugtraq&m=104342745916111
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11152
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0038