CVE-2003-0038
Mailman 2.1 - Cross-Site Scripting via Email or Language Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0038. PoCs published by [email protected].
AI-analyzed exploit summary This is a writeup describing a cross-site scripting (XSS) vulnerability in GNU Mailman due to insufficient sanitization of user-supplied data in error pages. The example demonstrates how an attacker could embed malicious script code in a URL to execute arbitrary JavaScript in the context of a victim's browser.
Description
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.
Exploits (2)
This is a writeup describing a cross-site scripting (XSS) vulnerability in GNU Mailman due to insufficient sanitization of user-supplied data in error pages. The example demonstrates how an attacker could embed malicious script code in a URL to execute arbitrary JavaScript in the context of a victim's browser.
This is a writeup describing a cross-site scripting (XSS) vulnerability in GNU Mailman due to insufficient sanitization of URI parameters. The example demonstrates how an attacker could embed malicious script code in a URL to execute arbitrary JavaScript in the context of a victim's browser.