CVE-2006-1712

Published: Apr 11, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

Affected (1)

Products: Gnu: Mailman

Gnu

1 product

Mailman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailman	Version 2.1.7

References (16)

http://bugs.gentoo.org/show_bug.cgi?id=129136

Source: cve@mitre.org

http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html

Source: cve@mitre.org

http://secunia.com/advisories/19558

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015876

Source: cve@mitre.org

Patch

http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html

Source: cve@mitre.org

http://www.osvdb.org/24442

Source: cve@mitre.org

http://www.securityfocus.com/bid/17403

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1269

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=129136