high7.5Public exploit code
CVE-2002-0388
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU Mailman 2.0.x - Admin Login Cross-Site Scripting2002-05-20 · webapps · cgi · Verified
Impact
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Mailman | through 2.0.11 |