110 matches found
CVE-2023-47099
A Stored Cross-Site Scripting XSS vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server...
CVE-2023-47098
A Stored Cross-Site Scripting XSS vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the real name or description field...
CVE-2023-47094
CVE-2023-47094 is a Stored Cross-Site Scripting (XSS) vulnerability in Virtualmin 7.7, affecting the Account Plans tab in System Settings. The issue allows remote attackers to inject arbitrary web script/HTML through the Plan name field while editing Account plan details. The available documents ...
CVE-2023-47096
A Reflected Cross-Site Scripting XSS vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field...
CVE-2023-47097
The CVE-2023-47097 issue affects Virtualmin 7.7, specifically the Server Templates feature under System Settings. A Stored XSS can occur through the Template name field when creating server templates, enabling remote attackers to inject arbitrary script/HTML. Root cause: input handling in the Tem...
Virtualmin Cross-Site Scripting Vulnerability
Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in the Server Templates feature...
CVE-2023-47096
CVE-2023-47096 is a reflected XSS vulnerability in Virtualmin 7.7, affecting the Cloudmin Services Client under System Setting. The issue is triggered via the Cloudmin services master field, allowing an attacker to inject arbitrary web script/html. Several connected records corroborate the vulner...
Virtualmin Cross-Site Scripting Vulnerability
Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in Cloudmin Services Client...
SUSE CVE-2017-8114
Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...
Webmin 安全漏洞
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...
Arbitrary Password Reset
Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...
Design/Logic Flaw
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...
CVE-2018-18208
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...
Design/Logic Flaw
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
CVE-2018-18207
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
CVE-2018-18207
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
CVE-2018-18208
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...
CVE-2018-18207
CVE-2018-18207 affects Virtualmin 6.03. The vulnerability arises from a flaw in the settings-editor_read.cgi file parameter, enabling Frame Injection . Exploitation details or successful exploit status are not provided in the connected documents. No remediation details are specified here.
