[Mailman-Users] Bug found in Mailman 2.1Beta
Danny Terweij
danny at terweij.nl
Thu May 2 13:31:59 CEST 2002
When you go to : http://yourdomain.com/mailman.listinfo/[listname]
You as normal member, knows a member email adres from that list and write
that email adres at the input field :
To unsubscribe from [listname], get a password reminder, or change your
subscription options enter your subscription email address:
[ a.member at domain.com ] {unsubscribe or edit options}
If you leave the field blank, you will be prompted for your email address
You can just edit a other member's options and can even change the password.
Please this is not a good situation.
Not me discovered it, but a member from a list.
Danny.
More information about the Mailman-Users
mailing list