57 matches found
CVE-2023-41163
A Reflected Cross-site scripting XSS vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down...
CVE-2023-41152
A Stored Cross-Site Scripting XSS vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program...
CVE-2023-41156
A Stored Cross-Site Scripting XSS vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter...
PT-2025-18077 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin versions 0.980 through 1.x before 1.660 Description: The issue allows remote code execution in uconfig save.cgi due to the use of the two-argument form of Perl open, specifically in the sig file free function. This enables an attacker...
CVE-2015-2079
CVE-2015-2079 affects Webmin Usermin 0.980–1.x before 1.660. Root cause: the uconfig_save.cgi module uses the two-argument form of Perl open, enabling remote code execution (sig_file_free). Impact: remote code execution with high/critical potential. Affected software is Usermin; remediation is to...
CVE-2015-2079
Usermin 0.980 through 1.x before 1.660 allows uconfigsave.cgi sigfilefree remote code execution because it uses the two argument not three argument form of Perl open...
Webmin Security Vulnerabilities
Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 1.970 and Usermin versions prior to 1.820, which stems from a cross-site scripting vulnerability in sessionlogin.c...
Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.001, which arises from a security issue when editing the autoreply file page and allows remote...
PT-2023-27831 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin version 2.001 Description: A Stored Cross-Site Scripting XSS issue in the filter and forward mail tab allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter...
CVE-2023-41152
A Stored Cross-Site Scripting XSS vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program...
PT-2023-27833 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the MIME type programs tab, allowing remote attackers to inject arbitrary web script or HTML via the description field when creating a new MIME type program...
Webmin Usermin 跨站脚本漏洞
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A security vulnerability in webmin Usermin version 2.000, which originates from a cross-site scripting XSS vulnerability in the File Manager tab, allows remote...
PT-2022-22590 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin versions prior to 1.851 Description: The issue allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module. Recommendations: For versions prior to 1.851, update to version 1.851 or...
Usermin 1.750 - Remote Command Execution Exploit
Exploit for linux platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' ...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the usermin package up to version 1.070-r1 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Usermin vulnerable to cross-site scripting
Overview Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
Usermin vulnerable to OS command injection
Overview Usermin is a web-based interface used to manage webmail. Usermin contains an OS command injection vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...
Webmin and Usermin authentication bypass vulnerability
Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
Exploit for multiple platform in category remote exploits ================================================================== Webmin 1.290 / Usermin 1.220 Arbitrary File Disclosure Exploit ================================================================== ?php / Name : Webmin / Usermin Arbitrary...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
No description provided by source. ?php / Name : Webmin / Usermin Arbitrary File Disclosure Vulnerability Date : 2006-06-30 Patch : update to version 1.290 Advisory : http://securitydot.net/vuln/exploits/vulnerabilities/articles/17885/vuln.html Coded by joffer , http://securitydot.net / $host =...