CVE-2006-1712

N/A Unknown

Published: April 11, 2006 Modified: April 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.gentoo.org/show_bug.cgi?id=129136

Source: cve@mitre.org

http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html

Source: cve@mitre.org

http://secunia.com/advisories/19558

Source: cve@mitre.org

Patch Vendor Advisory

http://securitytracker.com/id?1015876

Source: cve@mitre.org

Patch

http://www.mail-archive.com/mailman-checkins%40python.org/msg06273.html

Source: cve@mitre.org

http://www.osvdb.org/24442

Source: cve@mitre.org

http://www.securityfocus.com/bid/17403

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1269

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=129136