1717 matches found
PT-2024-5735
Name of the Vulnerable Software and Affected Versions Webmin versions prior to 2.003 Description A cross-site request forgery vulnerability exists in the ajaxterm module. If exploited, unintended operations may be performed when a user views a malicious page while logged in, potentially allowing...
Webmin Security Vulnerabilities
Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 2.003, which stems from insufficient or improperly handled permissions in the ajaxterm module...
Webmin Security Vulnerabilities
Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 1.910, which stems from a cross-site scripting vulnerability in sysinfo.cgi...
PT-2024-9844
Name of the Vulnerable Software and Affected Versions: Webmin affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this issue. The specific flaw exists within the handli...
PT-2024-2233
Name of the Vulnerable Software and Affected Versions Webmin/Virtualmin versions affected versions not specified Broadcom affected versions not specified Microsoft affected versions not specified MikroTik affected versions not specified Description The issue is related to implementations of UDP...
com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.0.7)
org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...
Webmin cross-site scripting vulnerability (CNVD-2024-06437)
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...
CVE-2023-52046
Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...
Cross site scripting
Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...
PT-2024-14375
Name of the Vulnerable Software and Affected Versions webmin versions 2.105 and earlier Description A Cross Site Scripting vulnerability XSS in webmin allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field. Recommendations For webmin...
CVE-2023-52046: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...
CVE-2023-52046
Cross Site Scripting vulnerability XSS in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the "Execute cron job as" tab Input field...
Webmin security vulnerabilities
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...
CVE-2023-52046
Webmin (=2.110) to mitigate. If upgrading, verify compatibility and test in a staging environment before deployment.
VulnCheck KEV: CVE-2019-15642
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
Webmin cross-site scripting vulnerability (CNVD-2024-21490)
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin. The vulnerability is due to a file manager function that incorrectly validates user-supplied input. An attacker could use this...
Exploit for CVE-2022-1040
CVE-2022-1040-sophos-rce-poc sophos rce poc sophos webmin po...
CVE-2023-43309
There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...
CVE-2023-43309
There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...
CVE-2023-43309
There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...