385 matches found
CVE-2006-3392
CVE-2006-3392 الوصف تستدعي Webmin قبل الإصدار 1.290 وUsermin قبل الإصدار 1.220 دالة simplifypath قبل فك ترميز HTML، مما يسمح للمهاجمين عن بُعد بقراءة ملفات عشوائية، كما هو موضح باستخدام تسلسلات "..%01"، التي تتجاوز إزالة تسلسلات "../" قبل إزالة البايتات مثل "%01" من اسم الملف. ملاحظة: هذه مشكلة...
CVE-2006-3392
CVE-2021-42913 Webmin vor Version 1.290 und Usermin vor Version 1.220 ruft die Funktion simplifypath vor dem Dekodieren von HTML auf, was es entfernten Angreifern ermöglicht, beliebige Dateien zu lesen, wie anhand von "..%01"-Sequenzen demonstriert wird, die das Entfernen von "../"-Sequenzen...
CVE-2006-3392
CVE-2006-3392 Sulla vulnerabilità È stata segnalata una vulnerabilità in Webmin e Usermin che può essere sfruttata da utenti malintenzionati per divulgare informazioni potenzialmente sensibili. La vulnerabilità è causata da un errore non specificato nella gestione di un URL. Può essere sfruttata...
Usermin 2.100 - Username Enumeration
Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...
CVE-2006-3392
CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin prima della versione 1.290 e Usermin prima della versione 1.220 chiamano la funzione simplifypath prima di decodificare l'HTML, il che consente a un utente malintenzionato remoto di leggere file arbitrari, come dimostrato...
CVE-2006-3392
È un semplice tool per sfruttare le vulnerabilità di Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure. Come usare: 1. Esegui lo script python exploit.py. 2. Inserisci la porta. 3. Seleziona la cartella che vuoi visualizzare. ⛔ Importante ⛔ Non siamo responsabili per l'uso di questo script...
CVE-2023-40986
A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...
Exploit for Generation of Error Message Containing Sensitive Information in Webmin Usermin
No d...
ROS-20251105-05
Vulnerability of passwordchange.cgi script of Webmin hosting control panel and web-interface for unix-like systems Usermin is related to flaws in error reporting mechanism. unix-like systems Usermin is related to a flaw in the error reporting mechanism. Exploitation of the vulnerability could all...
EUVD-2007-1273
Malware in sbrugna...
EUVD-2014-3821
Malware in sbrugna...
EUVD-2006-4530
Malware in sbrugna...
EUVD-2016-5873
Malware in sbrugna...
EUVD-2008-0730
Malware in sbrugna...
EUVD-2009-4534
Malware in sbrugna...
EUVD-2004-0587
Malware in sbrugna...
EUVD-2014-3820
Malware in sbrugna...