CVE-2006-1712 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

Affected Software

Name	Vendor	Start Version	End Version
Mailman	Gnu	2.1.7 (including)	2.1.7 (including)
Mailman	Ubuntu	devel	*
Mailman	Ubuntu	edgy	*
Mailman	Ubuntu	feisty	*
Mailman	Ubuntu	upstream	*

References

http://bugs.gentoo.org/show_bug.cgi?id=129136
http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html
http://secunia.com/advisories/19558
http://securitytracker.com/id?1015876
http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html
http://www.osvdb.org/24442
http://www.securityfocus.com/bid/17403
http://www.vupen.com/english/advisories/2006/1269
http://bugs.gentoo.org/show_bug.cgi?id=129136
http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html
http://secunia.com/advisories/19558
http://securitytracker.com/id?1015876
http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html
http://www.osvdb.org/24442
http://www.securityfocus.com/bid/17403
http://www.vupen.com/english/advisories/2006/1269

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1712
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html