20040820 Cross Site Scripting Vulnerability in Sympamailing list
http://marc.info/?l=bugtraq&m=109312475207604&w=2 CVE-2004-1735
Sympa 4.x - New List HTML Injection
Record summary
CVE-2004-1735 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSympa 4.x - New List HTML InjectionExploitDB exploitby Jose AntonioNot analyzed1 file
References
512339Third-party advisory
http://secunia.com/advisories/12339 10992vdb entry
http://www.securityfocus.com/bid/10992 sympa-description-xss(17057)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17057 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1735