Vulnerabilities > Webmin

DATE CVE VULNERABILITY TITLE RISK
2017-04-28 CVE-2017-2106 Cross-site Scripting vulnerability in Webmin
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
webmin CWE-79
4.3
2017-04-12 CVE-2016-4897 Cross-site Scripting vulnerability in Webmin Usermin
Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690.
network
webmin CWE-79
4.3
2015-02-10 CVE-2015-1377 Link Following vulnerability in Webmin
The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.
local
low complexity
webmin CWE-59
4.9
2014-07-20 CVE-2014-3884 Cross-Site Scripting vulnerability in Webmin Usermin
Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
webmin CWE-79
4.3
2014-07-20 CVE-2014-3885 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
network
webmin CWE-79
4.3
2014-07-20 CVE-2014-3886 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
high complexity
webmin CWE-79
2.6
2014-06-21 CVE-2014-3883 OS Command Injection vulnerability in Webmin Usermin
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
network
webmin CWE-78
6.8
2014-05-30 CVE-2014-3924 Cross-Site Scripting vulnerability in Webmin Userwin and Webmin
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
network
webmin CWE-79
4.3
2014-03-16 CVE-2014-0339 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
network
webmin CWE-79
4.3
2011-05-31 CVE-2011-1937 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
network
webmin CWE-79
4.3