CVE-2008-0564

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the lists info attribute in the web administrator interface, a different vulnerability than CVE-2006-3636.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

2.408

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2011:0307) Moderate: mailman security update mailman-2.1.9-6.el5_6.1.i386.rpm	Linux
(RHSA-2011:0307) Moderate: mailman security update mailman-2.1.9-6.el5_6.1.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234