CVE-2006-3636

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-06 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

GNU Mailman: 2.1, 2.1.1, 2.1.1-beta1, 2.1.2, 2.1.3, 2.1.4 (+6)

References

http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html
http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt
http://rhn.redhat.com/errata/RHSA-2006-0600.html
http://secunia.com/advisories/21732
http://secunia.com/advisories/21792
http://secunia.com/advisories/21879
http://secunia.com/advisories/22011
http://secunia.com/advisories/22020
http://secunia.com/advisories/22227
http://secunia.com/advisories/22639
http://security.gentoo.org/glsa/glsa-200609-12.xml
http://securitytracker.com/id?1016808

Get alerted when CVE-2006-3636 or the next vulnerability affects your stack