1472 matches found
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
No description provided by source...
Webmin 1.5 - Web Brute Force (cgi-version)
No description provided by source. !/usr/bin/perl use CGI qw:standard; use IO::Socket; $CGI::HEADERSONCE = 1; $CGI = new CGI; $atak = $CGI-paramatak; $host = $CGI-paramhost; $wlist = $CGI-paramwlist; $cmd = $CGI-paramcmd; print $CGI-header-type='text/html',-charset='windows-1254'; print...
Webmin 0.9x,Usermin 0.9x/1.0 Session ID Spoofing Unauthenticated Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6915/info A vulnerability has been discovered in the 'Miniserv.pl' script used to invoke both Webmin and Usermin. Due to insufficient sanitization of client-supplied BASE64 encoded input, it is possible to inject a Sessio...
webmin 0.91 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3698/info Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms, you can setup user accounts, Apache, DNS, file sharing and so on. Webmin will run on most Uni...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)
No description provided by source...
Webmin 0.x Script Code Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4329/info Webmin is a web-based interface for system administration of Unix and Linux operating systems. Webmin does not filter script code from output that may be displayed by the web interface, such as log files, etc...
Webmin 0.x RPC Function Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5591/info In cases where users of Webmin do not have root access on the underlying host, it may be possible to mount privilege escalation attacks on the underlying host. This normally occurs in configurations where multip...
Webmin vulnerable to cross-site scripting
Overview Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. hasegawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
Webmin vulnerable to cross-site scripting
Overview Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability. Yoshinori Matsumoto of Kobe Digital Labo, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
JVN#49974594: Webmin vulnerable to cross-site scripting
Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser who is logged into Webmin. Solution Update the software Update to the latest version according to the information provided by th...
JVN#02213197: Webmin vulnerable to cross-site scripting
Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. Impact An arbitrary script may be executed on a user's web browser who is logged into Webmin. Solution...
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
CVE-2014-3924
CVE-2014-3924 affects Webmin < 1.690 and Usermin
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Updated webmin package fixes security vulnerabilities
Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...
MGASA-2014-0233 Updated webmin package fixes security vulnerabilities
Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...
[ MDVSA-2014:062 ] webmin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:062 http://www.mandriva.com/en/support/security/ Package : webmin Date : March 17, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and...
http-vuln-cve2006-3392 NSE Script
Exploits a file disclosure vulnerability in Webmin CVE-2006-3392 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML. This allows arbitrary files to be read, without requiring authentication, using "..%01" sequences to bypass the removal of "../"...
Webmin 'view.cgi'跨站脚本漏洞
Bugtraq ID:66248 CVE ID:CVE-2014-0339 Webmin是一款基于WEB的Unix和Linux操作系统系统管理接口。 Webmin 'view.cgi'不正确过滤"search"参数数据，允许远程攻击者利用漏洞进行反射型跨站脚本攻击，可获取敏感信息或劫持用户会话。 0 Webmin 1.670 目前没有详细解决方案提供： http://www.webmin.com https://192.168.49.132:10000/webminlog/view.cgi?id=1&search=e";scriptalertdocument.cookie;/script...