{"schemaVersion":3,"id":"CVE-2008-0564","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's \"info attribute\" in the web administrator interface, a different vulnerability than CVE-2006-3636.","dates":{"published":"2008-02-05T01:00:00.000Z","modified":"2024-08-07T07:46:54.999Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01919,"percentile":0.79578,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01919},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01919,"percentile":0.79578}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01919,"percentile":0.79578}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"debian","product":"mailman","name":"mailman","label":"mailman","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/mailman","purlType":"deb","versions":[{"text":"< 1:2.1.10~b3-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.1.10~b3-1","eol":null,"hubHref":null},{"vendor":"mailman","product":"mailman","name":"mailman","label":"mailman","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.1.10b","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.1.10b","eol":null,"hubHref":"/vendor/mailman/mailman"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","label":"lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","WEB"]},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061","label":"www.mandriva.com/en/security/advisories?name=MDVSA-2008:061","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0307.html","label":"www.redhat.com/support/errata/RHSA-2011-0307.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","WEB"]},{"url":"https://issues.rpath.com/browse/RPL-2207","label":"issues.rpath.com/browse/RPL-2207","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","WEB"]},{"url":"http://www.vupen.com/english/advisories/2008/0422","label":"www.vupen.com/english/advisories/2008/0422","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Advisory"]},{"url":"http://secunia.com/advisories/31687","label":"secunia.com/advisories/31687","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","label":"lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","WEB"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0056","label":"wiki.rpath.com/Advisories:rPSA-2008-0056","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM","WEB"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html","label":"www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"http://secunia.com/advisories/28966","label":"secunia.com/advisories/28966","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-586-1","label":"www.ubuntu.com/usn/usn-586-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Advisory"]},{"url":"http://support.apple.com/kb/HT4077","label":"support.apple.com/kb/HT4077","hostname":"support.apple.com","tags":["X Refsource CONFIRM","WEB"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103","label":"sourceforge.net/project/shownotes.php?release_id=559308&group_id=103","hostname":"sourceforge.net","tags":["X Refsource CONFIRM","WEB"]},{"url":"http://secunia.com/advisories/28916","label":"secunia.com/advisories/28916","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html","label":"mail.python.org/pipermail/mailman-announce/2008-February/000096.html","hostname":"mail.python.org","tags":["Mailing List","X Refsource MLIST","WEB"]},{"url":"http://www.securityfocus.com/archive/1/488236/100/0/threaded","label":"www.securityfocus.com/archive/1/488236/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","WEB"]},{"url":"http://secunia.com/advisories/29388","label":"secunia.com/advisories/29388","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"http://www.securityfocus.com/bid/27630","label":"www.securityfocus.com/bid/27630","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","WEB"]},{"url":"http://www.vupen.com/english/advisories/2011/0542","label":"www.vupen.com/english/advisories/2011/0542","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Advisory"]},{"url":"http://secunia.com/advisories/28794","label":"secunia.com/advisories/28794","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"http://secunia.com/advisories/29249","label":"secunia.com/advisories/29249","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431526","label":"bugzilla.redhat.com/show_bug.cgi?id=431526","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","REPORT"]},{"url":"http://secunia.com/advisories/43549","label":"secunia.com/advisories/43549","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2011:0307"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-02-05T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T07:46:54.999Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T02:18:09.877Z","stale":false,"partial":false}}