CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered,...

CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered,...

CVE-2024-36451

CVE-2024-36451 affects the Webmin ajaxterm module. Multiple sources (NVD, Red Hat, OSV, JVN) describe an improper handling of insufficient permissions or privileges that could allow an unauthorized user to hijack a console session, potentially exposing data, altering webpages, or causing a server...

CVE-2024-36450

Webmin is affected by CVE-2024-36450 due to a cross-site scripting flaw in sysinfo.cgi present in Webmin versions prior to 1.910. Exploitation can cause arbitrary scripts to run in the victim’s browser, with potential session ID exposure, webpage alteration, or server disruption. The vulnerabilit...

CVE-2024-36450

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...

CVE-2024-36450

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...

CVE-2024-36450

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may b...

PT-2024-4729 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.003 Description: The issue is related to improper handling of insufficient permissions or privileges in the ajaxterm module of Webmin. This could allow an unauthorized user to hijack a console session, potentially...

Multiple vulnerabilities in multiple Webmin products

Overview Multiple Webmin products contain multiple vulnerabilities listed below. sysinfo.cgi is vulnerable to cross-site scripting CWE-79 CVE-2024-36450 sessionlogin.cgi is vulnerable to cross-site scripting CWE-79 CVE-2024-36453 ajaxterm module is vulnerable to improper handling of insufficient...

Webmin Security Vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 2.003, which stems from a cross-site request forgery vulnerability in the ajaxterm module...

Webmin Security Vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 1.970 and Usermin versions prior to 1.820, which stems from a cross-site scripting vulnerability in sessionlogin.c...

PT-2024-5735 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.003 Description: A cross-site request forgery vulnerability exists in the ajaxterm module. If exploited, unintended operations may be performed when a user views a malicious page while logged in, potentially allowin...

PT-2024-5589 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 1.910 Description: A cross-site scripting vulnerability exists in the sysinfo.cgi of Webmin. If this issue is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website usin...

Webmin Security Vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 2.003, which stems from insufficient or improperly handled permissions in the ajaxterm module...

Webmin Security Vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 1.910, which stems from a cross-site scripting vulnerability in sysinfo.cgi...

JVN#81442045: Multiple vulnerabilities in multiple Webmin products

Multiple Webmin products contain multiple vulnerabilities listed below. sysinfo.cgi is vulnerable to cross-site scripting CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Base Score 6.1 CVE-2024-36450 sessionlogin.cgi is vulnerable to cross-site scripting CWE-79...

PT-2024-5727 · Webmin +2 · Webmin +2

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 1.970 Usermin versions prior to 1.820 Description: A cross-site scripting issue exists due to inadequate protection of the webpage structure in the session login.cgi script of Webmin and Usermin. This can be exploited...

PT-2024-9844 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this issue. The specific flaw exists within the handli...

PT-2024-2233 · Broadcom +2 · Broadcom +2

Name of the Vulnerable Software and Affected Versions: Webmin/Virtualmin versions affected versions not specified Broadcom affected versions not specified Microsoft affected versions not specified MikroTik affected versions not specified Description: The issue is related to implementations of UDP...

Webmin cross-site scripting vulnerability (CNVD-2024-06437)

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...