Lucene search
+L

1717 matches found

Prion
Prion
•added 2023/09/21 2:15 p.m.•38 views

Cross site scripting

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.3CVSS4.8AI score0.00457EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/09/21 12:00 a.m.•176 views

CVE-2023-43309

CVE-2023-43309 affects Webmin 2.002 and earlier. The vulnerability is a stored XSS via the Cluster Cron Job tab Input field, allowing remote attackers to inject and execute scripts. The issue is noted across multiple sources; a patch exists in Webmin 2.003 or later (per vulnerability scanners ref...

4.8CVSS4.8AI score0.00457EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/21 12:00 a.m.•19 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

5.5AI score0.00457EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/21 12:00 a.m.•6 views

CVE-2023-43309: Improper Neutralization of Input During Web Page Generation

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

4.8CVSS5.5AI score0.00457EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/09/21 12:00 a.m.•22 views

PT-2023-9415 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions 2.002 and below Description: The issue is related to a stored cross-site scripting XSS vulnerability, which allows attackers to run malicious scripts by injecting a specially crafted payload via the Cluster Cron Job tab Input...

6.1CVSS4AI score0.00841EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2023/09/21 12:00 a.m.•25 views

Webmin Cross-Site Scripting Vulnerability

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin 2.002 and prior versions that stems from a stored cross-site scripting XSS vulnerability in the Input field of the Cluster Cron Job...

4.8CVSS5.6AI score0.00457EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/21 12:00 a.m.•57 views

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

5.1AI score0.00457EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/09/16 12:00 a.m.•20 views

Webmin Usermin Cross-Site Scripting Vulnerability

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Webmin Usermin version 2.000. A remote attacker can use this vulnerability to inject arbitrary web script or HTML via...

5.4CVSS6AI score0.00494EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2023/09/15 4:15 a.m.•15 views

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

6.1CVSS5.7AI score0.00609EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/15 4:15 a.m.•37 views

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

6.1CVSS5.9AI score0.00609EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/15 4:15 a.m.•36 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

5.8CVSS5.9AI score0.00609EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2023/09/15 3:15 a.m.•18 views

CVE-2023-40982

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

5.4CVSS5.9AI score0.00494EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/15 3:15 a.m.•55 views

CVE-2023-40982

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

5.4CVSS5.3AI score0.00494EPSS
SaveExploits1References1
Prion
Prion
•added 2023/09/15 3:15 a.m.•32 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

4.9CVSS5.2AI score0.00494EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2023/09/15 1:15 a.m.•17 views

CVE-2023-40985

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file ...

5.4CVSS5.9AI score0.00475EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/15 1:15 a.m.•30 views

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

5.4CVSS5.7AI score0.00475EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/15 1:15 a.m.•11 views

CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

5.4CVSS5.9AI score0.00475EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/15 1:15 a.m.•27 views

CVE-2023-40985

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file ...

5.4CVSS5.2AI score0.00475EPSS
SaveExploits1References1
NVD
NVD
•added 2023/09/15 1:15 a.m.•38 views

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

5.4CVSS5.2AI score0.00475EPSS
SaveExploits1References1
NVD
NVD
•added 2023/09/15 1:15 a.m.•49 views

CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

5.4CVSS5.3AI score0.00475EPSS
SaveExploits1References1
Rows per page
Query Builder