CVE-2021-32156

..| CSRF 到 RCE CRON |.. 描述： 利用跨站请求伪造（CSRF）攻击，通过 Webmin 的计划 Cron 任务功能来实现远程命令执行（RCE）。 测试版本： Webmin 1.973（GitHub 的最新版本 07/03/2021） 攻击类型： 远程 影响： 远程命令执行 漏洞利用代码 POC： 产品厂商： https://www.webmin.com 附加信息： “Webmin 是一种基于 Web 的系统管理工具，适用于类 Unix 服务器和服务，全球安装量超过...

EUVD-2021-19014

Malware in sbrugna...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2023-41154

A Stored Cross-Site Scripting XSS vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable...

CVE-2023-41154

A Stored Cross-Site Scripting XSS vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable...

CVE-2023-41154

A Stored Cross-Site Scripting XSS vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable...

Webmin <= 1.994 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:webmin"; ifdescription...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32157

Webmin 1.973 contains a Cross-Site Scripting (XSS) vulnerability via the Scheduled Cron Jobs feature. The issue arises from insufficient filtering/escaping in that feature, enabling client-side JavaScript execution. Connected sources confirm CVE-2021-32157 and corroborating mentions in RH and OSV...

CVE-2021-32156

CVE-2021-32156 affects Webmin 1.973 via the Scheduled Cron Jobs feature. Root cause: CSRF due to lack of token validation in the Cron/scheduled task handling. Impact: allows cross-site requests that could perform sensitive actions; CVSS v3.1 base score 8.8 (HIGH) with UI/Risk requiring user inter...