Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-0707

Опубликовано: 22 фев. 2011
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*
Версия до 2.1.14 (включая)
cpe:2.3:a:gnu:mailman:1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1:alpha:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1:beta:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1:stable:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.11:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.11:rc1:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.11:rc2:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.13:*:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.13:rc1:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1.14:rc1:*:*:*:*:*:*
cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%
0.0246
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2011-0707

ubuntu
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

redhat логотип

CVE-2011-0707

redhat
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

debian логотип

CVE-2011-0707

debian
больше 14 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py ...

github логотип

GHSA-24m7-q6q4-w3hx

github
около 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.

oracle-oval логотип

ELSA-2011-0308

oracle-oval
больше 14 лет назад

ELSA-2011-0308: mailman security update (MODERATE)

EPSS

Процентиль: 85%
0.0246
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79