Vulnerabilities > Webmin > Webmin

DATE CVE VULNERABILITY TITLE RISK
2015-02-10 CVE-2015-1377 Link Following vulnerability in Webmin
The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.
local
low complexity
webmin CWE-59
4.9
2014-07-20 CVE-2014-3886 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
high complexity
webmin CWE-79
2.6
2014-07-20 CVE-2014-3885 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
network
webmin CWE-79
4.3
2014-05-30 CVE-2014-3924 Cross-Site Scripting vulnerability in Webmin Userwin and Webmin
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
network
webmin CWE-79
4.3
2014-03-16 CVE-2014-0339 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
network
webmin CWE-79
4.3
2011-05-31 CVE-2011-1937 Cross-Site Scripting vulnerability in Webmin
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
network
webmin CWE-79
4.3
2010-01-05 CVE-2009-4568 Cross-Site Scripting vulnerability in Webmin Usermin and Webmin
Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
webmin CWE-79
4.3
2008-02-12 CVE-2008-0720 Cross-Site Scripting vulnerability in Webmin Usermin and Webmin
Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.
network
webmin CWE-79
4.3
2007-09-24 CVE-2007-5066 Improper Input Validation vulnerability in Webmin
Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL.
network
low complexity
webmin CWE-20
critical
9.0
2007-06-11 CVE-2007-3156 Cross-Site Scripting vulnerability in Webmin Usermin and Webmin
Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) message, or (3) question parameter.
network
webmin CWE-79
4.3