Gentoo Security Advisory GLSA 200409-15 (Usermin)

The remote host is missing updates announced in advisory GLSA 200409-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: perl

The remote host is missing an update to the system as announced in the referenced advisory. VID bb33981a-7ac6-11da-bf72-00123f589060 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: webmin

The remote host is missing an update to the system as announced in the referenced advisory. VID 227475c2-09cb-11db-9156-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: perl

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: webmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Webmin and Usermin authentication bypass vulnerability

Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...

Multiple vulnerabilities in Webmin and Usermin

Overview Webmin and Usermin, web-based system management tools, contain the following vulnerabilities: - Execution of arbitrary files and viewing source code by bypassing Webmin and Usermin's access restrictions - Cross-site scripting We are aware that these vulnerabilities have been addressed in...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 contain a cross-site scripting (XSS) vulnerability in the webmin_search.cgi component, exploitable via the search parameter. The issue may affect other components reachable through a search box or open file box. The vulnerability is publicly docu...

Debian: Security Advisory (DSA-1177-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1177-1 (usermin)

The remote host is missing an update to usermin announced via advisory DSA 1177-1. Hendrik Weimer discovered that it is possible for a normal user to disable the login shell of the root account via usermin, a web-based administration tool. OpenVAS Vulnerability Test $Id: deb11771.nasl 6616...

Webmin File Disclosure

A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to read the contents of any files on the...

GLSA-200707-05 : Webmin, Usermin: XSS vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200707-05 Webmin, Usermin: XSS vulnerabilities The pamlogin.cgi file does not properly sanitize user input before sending it back as output to the user. Impact : An unauthenticated attacker could entice a user to browse a speciall...

Webmin pam_login.cgis远程跨站脚本执行漏洞

BUGTRAQ ID: 24381 CVECAN ID: CVE-2007-3156 Webmin是一款基于WEB的Unix和Linux操作系统管理界面。 Webmin的pamlogin.cgi文件中存在多个跨站脚本漏洞，如果用户受骗访问了恶意网页的话，远程攻击者就可以通过cid、message或question参数向用户浏览器会话注入并执行任意脚本。 Webmin Webmin 1.340 Webmin Usermin 1.270 Webmin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Webmin, Usermin: Cross-site scripting vulnerabilities

Background Webmin is a web-based administrative interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description The pamlogin.cgi file does not properly sanitize user input before sending it back as output t...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-3156

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-3156

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...