Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-4893
HistorySep 11, 2012 - 7:55 p.m.

CVE-2012-4893

2012-09-1119:55:00
CWE-352
[email protected]
web.nvd.nist.gov
28
webmin
csrf
vulnerability
hijacking
authentication
nvd

7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.0%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a different issue than CVE-2012-2982.

Related

prion 2
nessus 3
openvas 1
securityvulns 2
saint 4
packetstorm 1
cve 1
checkpoint_advisories 1
cert 1
prion
prion
Cross site request forgery (csrf)
2012-09-11 19:55:00
Code injection
2012-09-11 18:55:00
nessus
nessus
Mandriva Linux Security Advisory : webmin (MDVSA-2014:062)
2014-03-18 00:00:00
Webmin <= 1.590 Multiple Vulnerabilities
2018-09-19 00:00:00
Webmin <= 1.580 Multiple Input-Validation Vulnerabilities (deprecated)
2013-05-01 00:00:00
openvas
openvas
FreeBSD Ports: webmin
2012-11-26 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:062 ] webmin
2014-05-05 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2014-05-05 00:00:00
saint
saint
Webmin show.cgi Open Function Call Command Execution
2012-11-26 00:00:00
Webmin show.cgi Open Function Call Command Execution
2012-11-26 00:00:00
Webmin show.cgi Open Function Call Command Execution
2012-11-26 00:00:00
packetstorm
packetstorm
Webmin /file/show.cgi Remote Command Execution
2012-09-17 00:00:00
cve
cve
CVE-2012-2982
2012-09-11 18:55:00
checkpoint_advisories
checkpoint_advisories
Webmin show.cgi Command Execution (CVE-2012-2982)
2013-01-13 00:00:00
cert
cert
Webmin contains input validation vulnerabilities
2012-09-06 00:00:00

7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.0%

JSON
Related for CVE-2012-4893
prion2nessus3openvas1securityvulns2saint4packetstorm1cve1checkpoint_advisories1cert1