MDVSA-2011:036 -- Mandriva mailman| ID: oval:org.secpod.oval:def:300415 | Date: (C)2012-01-07 (M)2023-02-20 |
| Class: PATCH | Family: unix |
A vulnerability has been found and corrected in mailman: Multiple cross-site scripting vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the full name or username field in a confirmation message . Packages for 2009.0 are provided as of the Extended Maintenance Program
| Platform: |
| Mandriva Linux 2010.0 |
| Mandriva Linux 2010.1 |
| Mandriva Linux 2009.0 |
