Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2002-0388 — Cross-site Scripting in Mailman

6 documents6 sources
Severity
7.5HIGHNVD
EPSS
3.1%
top 13.09%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
GNU Mailman
Timeline
PublishedJun 18
Latest updateApr 30

Description

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgnu/mailman2.0.11

Patches

Patch: mail.python.org ↗Patch: mail.python.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-v3cv-7ww7-7g63: Cross-site scripting vulnerabilities in Mailman before 2↗2022-04-30
▶
CVEList
CVE-2002-0388: Cross-site scripting vulnerabilities in Mailman before 2↗2002-05-31
▶

💥Exploits & PoCs

1
Exploit-DB
GNU Mailman 2.0.x - Admin Login Cross-Site Scripting↗2002-05-20
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2002-05-20
▶

💬Community

1
Bugzilla
CVE-2002-0388 security flaw↗2018-08-16
▶
CVE-2002-0388 — Cross-site Scripting in GNU Mailman | cvebase