Webmin < 1.830 Multiple Cross Site Scripting Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.830. It is, therefore, affected by multiple cross site scripting vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108558; scriptversion"1.4";...

Webmin 0.21 <= 1.0 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is between versions 0.21 and 1.0. It is, therefore, affected by multiple vulnerabilities: - Versions 0.21 through 1.00 use the same SSL key for all installations, which may allow attackers to eavesdrop on traffic...

Webmin < 1.870 Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.870. It is, therefore, affected by a cross site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108562; scriptversion"1.4";...

Webmin < 1.250 miniserv.pl Remote Code Execution

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.250. It is, therefore, affected by a remote code execution vulnerability if syslog logging is enabled. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108549;...

Webmin < 0.5 Brute Force Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to version 0.5. It is, therefore, affected by an issue which would allow attackers to more easily brute force a password C Tenable Network Security, Inc. include'compat.inc'; if description scriptid10853...

Webmin Unspecified Command Execution Vulnerability (< 1.370)

The version of Webmin installed on the remote host is older than 1.370. It is therefore affected by an unspecified vulnerability that allows remote authenticated users to execute arbitrary commands via a crafted URL, provided the host operating system is Windows. Note that Nessus has relied on th...

Webmin chooser.cgi Cross-Site Scripting (< 1.330)

The version of Webmin installed on the remote host is older than 1.330. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities in chooser.cgi. These flaws allow remote attackers to inject arbitrary web script or HTML via a crafted filename. Note that Nessus has relied on...

Webmin < 0.85 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is earlier than 0.85. It is, therefore, affected by multiple vulnerabilities: - A privilege escalation vulnerability which may make authentication information available to all CGI programs and allows local users ...

Webmin < 1.850 Multiple Cross Site Scripting Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.850. It is, therefore, affected by multiple cross site scripting vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108559; scriptversion"1.5";...

Webmin 1.370 / 1.390 webmin_search.cgi Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is 1.370 or 1.390. It is, therefore, affected by a cross site scripting vulnerability in webminsearch.cgi C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108552; scriptversion"1.6";...

Webmin 1.850 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is version 1.850. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108560; scriptversion"1.5";...

Webmin 1.880 Information Disclosure Vulnerability

Webmin is prone to an information disclosure vulnerability that allows non-privileged users to access arbitrary files. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

Default configuration

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

Webmin 1.840/1.880 expose a Local File Inclusion flaw due to weak default config: enabling "Can view any file as a log file" lets non-privileged users read sensitive local files (e.g., /etc/shadow) via GET /syslog/save_log.cgi?view=1&file=/etc/shadow. Root cause: default settings grant access to ...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

Solaris 10 (sparc) : 145006-07

SunOS 5.10: Webmin patch. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 145006-04

SunOS 5.10: Webmin patch. Date this patch was last updated by Sun : Dec/07/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...