NVD

Id
79854  
Name
CVE-2002-0855  
Description
Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber"s list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-09-05  
Modified Date
2008-09-05  
Seq
2002-0855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398285 79854 CVE-2002-0855 20020724 cross-site scripting bug of Mailman  View
398286 79854 CVE-2002-0855 CLA-2002:522  View
398287 79854 CVE-2002-0855 http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html  View
398288 79854 CVE-2002-0855 DSA-147  View
398289 79854 CVE-2002-0855 mailman-subscription-option-xss(9985)  View
398290 79854 CVE-2002-0855 RHSA-2002:176  View
398291 79854 CVE-2002-0855 RHSA-2002:177  View
398292 79854 CVE-2002-0855 RHSA-2002:178  View
398293 79854 CVE-2002-0855 RHSA-2002:181  View
398294 79854 CVE-2002-0855 5298  View

Related JVN