CVE-2006-3636

Advisory

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295
• http://secunia.com/advisories/21732
• http://www.securityfocus.com/bid/19831
• http://rhn.redhat.com/errata/RHSA-2006-0600.html
• http://secunia.com/advisories/21792
• http://www.ubuntu.com/usn/usn-345-1
• http://securitytracker.com/id?1016808
• http://secunia.com/advisories/21879
• http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html
• http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt
• http://security.gentoo.org/glsa/glsa-200609-12.xml
• http://secunia.com/advisories/22011
• http://secunia.com/advisories/22020
• http://www.debian.org/security/2006/dsa-1188
• http://secunia.com/advisories/22227
• http://www.novell.com/linux/security/advisories/2006_25_sr.html
• http://www.securityfocus.com/bid/20021
• http://secunia.com/advisories/22639
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:165
• http://www.vupen.com/english/advisories/2006/3446
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28731
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553
• http://www.securityfocus.com/archive/1/445992/100/0/threaded
• https://nvd.nist.gov/vuln/detail/CVE-2006-3636
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3636