Lucene search
K

CVE-2012-2983

🗓️ 11 Sep 2012 18:00:00Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov👁 154 Views🌐 WEB

file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field

Related
Detection
Refs
Paths
NVD
Node
gentoowebminRange1.590
OR
gentoowebminMatch1.140
OR
gentoowebminMatch1.150
OR
gentoowebminMatch1.160
OR
gentoowebminMatch1.170
OR
gentoowebminMatch1.180
OR
gentoowebminMatch1.200
OR
gentoowebminMatch1.210
OR
gentoowebminMatch1.220
OR
gentoowebminMatch1.230
OR
gentoowebminMatch1.240
OR
gentoowebminMatch1.260
OR
gentoowebminMatch1.270
OR
gentoowebminMatch1.280
OR
gentoowebminMatch1.290
OR
gentoowebminMatch1.300
OR
gentoowebminMatch1.310
OR
gentoowebminMatch1.320
OR
gentoowebminMatch1.330
OR
gentoowebminMatch1.340
OR
gentoowebminMatch1.370
OR
gentoowebminMatch1.380
OR
gentoowebminMatch1.390
OR
gentoowebminMatch1.400
OR
gentoowebminMatch1.410
OR
gentoowebminMatch1.420
OR
gentoowebminMatch1.430
OR
gentoowebminMatch1.440
OR
gentoowebminMatch1.450
OR
gentoowebminMatch1.470
OR
gentoowebminMatch1.480
OR
gentoowebminMatch1.500
OR
gentoowebminMatch1.510
OR
gentoowebminMatch1.520
OR
gentoowebminMatch1.530
OR
gentoowebminMatch1.550
OR
gentoowebminMatch1.560
OR
gentoowebminMatch1.570
OR
gentoowebminMatch1.580
ParameterPositionPathDescriptionCWE
pagerequest body/session_login.cgiWebmin authentication endpoint used to obtain a session cookieCWE-287
userrequest body/session_login.cgiWebmin authentication endpoint used to obtain a session cookieCWE-287
passrequest body/session_login.cgiWebmin authentication endpoint used to obtain a session cookieCWE-287
filequery param/file/edit_html.cgiDirectory traversal to retrieve arbitrary files via edit_html.cgi?file=...&text=1CWE-287
textquery param/file/edit_html.cgiDirectory traversal to retrieve arbitrary files via edit_html.cgi?file=...&text=1CWE-287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
6.6Medium risk
Vulners AI Score6.6
CVSS 25
EPSS0.53985
154