Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a stored cross-site scripting XSS vulnerability in the Real name or description field...

CVE-2023-47095: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server...

PT-2023-30305 · Unknown · Virtualmin

Name of the Vulnerable Software and Affected Versions: Virtualmin version 7.7 Description: A Stored Cross-Site Scripting XSS issue in the Server Template under System Setting in Virtualmin allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating...

Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in the Create Virtual Server feature...

CVE-2023-47094: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details...

PT-2023-30306

Name of the Vulnerable Software and Affected Versions Virtualmin version 7.7 Description A Stored Cross-Site Scripting XSS vulnerability exists in Virtualmin, specifically in the Manage Extra Admins under Administration Options and the Create Extra Administrator tab, allowing remote attackers to...

CVE-2023-47096: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field...

CVE-2023-47097: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating server templates...

SUSE CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...

Arbitrary Password Reset

Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

Design/Logic Flaw

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

Design/Logic Flaw

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18207

CVE-2018-18207 affects Virtualmin 6.03. The vulnerability arises from a flaw in the settings-editor_read.cgi file parameter, enabling Frame Injection . Exploitation details or successful exploit status are not provided in the connected documents. No remediation details are specified here.