431 matches found
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
No description provided by source...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)
No description provided by source...
CVE-2014-3883
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
Design/Logic Flaw
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
CVE-2014-3883
Usermin قبل الإصدار 1.600 يعاني من ثغرة حقن أوامر OS من جهة عميل بعيد عبر إجراء مستخدم، ما يسمح بتنفيذ أوامر عشوائية على النظام المستهدف. الإصلاح المستند إلى الوثائق هو التحديث إلى الإصدار 1.600 أو أحدث. التبعات المحتملة كما وردت في المصادر: إمكانية تنفيذ أوامر OS عندما يقوم المستخدم المسجل بتصرف...
CVE-2014-3883
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
PT-2014-5575
Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.600 Description The issue allows remote attackers to execute arbitrary operating-system commands. This is related to a user action, although the specific vectors are not specified. Recommendations For versions prior...
CVE-2014-3883: Improper Neutralization of Special Elements used in an OS Command
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
Usermin vulnerable to cross-site scripting
Overview Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
Usermin vulnerable to OS command injection
Overview Usermin is a web-based interface used to manage webmail. Usermin contains an OS command injection vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...
JVN#48805624: Usermin vulnerable to OS command injection
Usermin is a web-based interface used to manage webmail. Usermin contains an OS command injection vulnerability. Impact When a user that is logged into Usermin performs a specific action, an arbitrary command may be executed. Solution Update the software Update to the latest version according to...
JVN#92737498: Usermin vulnerable to cross-site scripting
Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser who is logged into Usermin. Solution Update the software Update to the latest version according to the information...
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
CVE-2014-3924
CVE-2014-3924 affects Webmin < 1.690 and Usermin
CVE-2014-3924: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
PT-2014-5610
Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Usermin versions prior to 1.600 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via vectors related to...
Webmin < 0.970 / Usermin < 0.910 Login XSS Vulnerability
Webmin and Usermin are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross site scripting
Cross-site scripting XSS vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...