3532 matches found
Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail and more. A cross-site scripting vulnerability exists in Usermin version 2.001, which originates from a security issue within the filter, forward mail tab, that allows remote...
PT-2023-27831 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin version 2.001 Description: A Stored Cross-Site Scripting XSS issue in the filter and forward mail tab allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter...
CVE-2023-41160: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...
GNOME Time Tracker Injection Vulnerability
GNOME Time Tracker GnoTime,GTT is a to-do list/journal/diary tool from GNOME. A security vulnerability exists in GNOME Time Tracker version 3.0.2, which stems from the presence of a CSV injection vulnerability. An attacker can exploit the vulnerability to execute arbitrary code by building a .tsv...
CVE-2023-41162
A Reflected Cross-site scripting XSS vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down...
Webmin Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Webmin Usermin version 2.000, which stems from a reflected cross-site scripting XSS vulnerability in the File Manager...
Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which originates from a stored cross-site scripting XSS vulnerability in the Mail Forwarding a...
Webmin Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...
PT-2023-27830 · Usermin +1 · Usermin +1
Name of the Vulnerable Software and Affected Versions: Webmin and Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the mail forwarding and replies tab, allowing remote attackers to inject arbitrary web script or HTML via the forward to field while creating a ma...
CVE-2023-41152
CVE-2023-41152 is a Stored Cross-Site Scripting (XSS) vulnerability in Usermin 2.000, specifically in the MIME type programs tab. The issue arises when creating a new MIME type program, where an attacker can inject arbitrary script/HTML via the handle program field. The linked sources (e.g., Red ...
PT-2023-27829 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the scheduled cron jobs tab, allowing remote attackers to inject arbitrary web script or HTML via the value field parameter when creating a new environment...
CVE-2023-41152: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program...
PT-2023-27827
Name of the Vulnerable Software and Affected Versions Usermin version 2.000 Webmin and Usermin version 2.000 Description A Stored Cross-Site Scripting XSS issue exists in the MIME type programs tab, allowing remote attackers to inject arbitrary web script or HTML via the handle program field whil...
Webmin Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which stems from a stored cross-site scripting XSS vulnerability in the MIME type program tab...
CVE-2023-41158: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program...
CVE-2023-0119
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...
CVE-2023-0119 Foreman: stored cross-site scripting in host tab
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...
CVE-2023-0119 Foreman: stored cross-site scripting in host tab
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...
CVE-2023-0119
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...
