CVE-2003-0038

EPSS 10.63%
Published 07.02.2003 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Gnu ≫ Mailman Version2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	10.63%	0.926

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://marc.info/?l=bugtraq&m=104342745916111

http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt

Patch

http://www.debian.org/security/2004/dsa-436

Patch

Vendor Advisory

http://www.osvdb.org/9205

http://www.securityfocus.com/bid/6677

http://www.securitytracker.com/id?1005987

https://exchange.xforce.ibmcloud.com/vulnerabilities/11152

https://nvd.nist.gov/vuln/detail/CVE-2003-0038

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0038

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0038

EUVD