Lucene search
+L

1472 matches found

NVD
NVD
added 2024/01/25 9:15 p.m.24 views

CVE-2023-52046

Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...

4.8CVSS5.3AI score0.00566EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/25 9:15 p.m.17 views

Cross site scripting

Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...

4.3CVSS7AI score0.00566EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/25 12:00 a.m.8 views

Webmin 安全漏洞

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...

4.8CVSS6.1AI score0.00566EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/01/25 12:00 a.m.6 views

CVE-2023-52046

Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...

7AI score0.00566EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/25 12:00 a.m.76 views

CVE-2023-52046

Webmin (=2.110) to mitigate. If upgrading, verify compatibility and test in a staging environment before deployment.

4.8CVSS5.2AI score0.00566EPSS
SaveExploits1References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/01/17 12:00 a.m.7 views

VulnCheck KEV: CVE-2019-15642

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it...

8.8CVSS7.4AI score0.34798EPSS
SaveExploits4References1
CNVD
CNVD
added 2023/10/12 12:00 a.m.15 views

Webmin cross-site scripting vulnerability (CNVD-2024-21490)

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin. The vulnerability is due to a file manager function that incorrectly validates user-supplied input. An attacker could use this...

5.4CVSS6.2AI score0.00408EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2023/09/26 7:26 a.m.620 views

Exploit for CVE-2022-1040

CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin po...

9.8CVSS9.7AI score0.99796EPSS
SaveExploits9
NVD
NVD
added 2023/09/21 2:15 p.m.22 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.8CVSS4.9AI score0.00395EPSS
SaveExploits1References1
OSV
OSV
added 2023/09/21 2:15 p.m.8 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.8CVSS5.7AI score0.00395EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/21 2:15 p.m.5 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.8CVSS5.7AI score0.00395EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/21 2:15 p.m.29 views

Cross site scripting

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.3CVSS4.8AI score0.00395EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/21 12:00 a.m.15 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

5.5AI score0.00395EPSS
SaveExploits1References1
CVE
CVE
added 2023/09/21 12:00 a.m.156 views

CVE-2023-43309

CVE-2023-43309 affects Webmin 2.002 and earlier. The vulnerability is a stored XSS via the Cluster Cron Job tab Input field, allowing remote attackers to inject and execute scripts. The issue is noted across multiple sources; a patch exists in Webmin 2.003 or later (per vulnerability scanners ref...

4.8CVSS4.8AI score0.00395EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/09/21 12:00 a.m.42 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

5.1AI score0.00395EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/21 12:00 a.m.12 views

Webmin Cross-Site Scripting Vulnerability

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin 2.002 and prior versions that stems from a stored cross-site scripting XSS vulnerability in the Input field of the Cluster Cron Job...

4.8CVSS5.6AI score0.00395EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/21 12:00 a.m.9 views

PT-2023-9415 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions 2.002 and below Description: The issue is related to a stored cross-site scripting XSS vulnerability, which allows attackers to run malicious scripts by injecting a specially crafted payload via the Cluster Cron Job tab Input...

6.1CVSS4AI score0.00618EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2023/09/16 12:00 a.m.11 views

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Webmin Usermin version 2.000. A remote attacker can use this vulnerability to inject arbitrary web script or HTML via...

5.4CVSS6AI score0.00397EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/09/15 4:15 a.m.7 views

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

6.1CVSS5.7AI score0.00522EPSS
SaveExploits1References3
NVD
NVD
added 2023/09/15 4:15 a.m.28 views

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

6.1CVSS5.9AI score0.00522EPSS
SaveExploits1References1
Rows per page
Query Builder