[Mailman-Users] Bug found in Mailman 2.1Beta

Danny Terweij danny at terweij.nl
Thu May 2 13:31:59 CEST 2002


When you go to : http://yourdomain.com/mailman.listinfo/[listname]
You as normal member, knows a member email adres from that list and write
that email adres at the input field :

To unsubscribe from [listname], get a password reminder, or change your
subscription options enter your subscription email address:

 [  a.member at domain.com   ]        {unsubscribe or edit options}

If you leave the field blank, you will be prompted for your email address

You can just edit a other member's options and can even change the password.

Please this is not a good situation.
Not me discovered it, but a member from a list.

Danny.








More information about the Mailman-Users mailing list