Webmin < 1.550 XSS Vulnerability (Mar 2018) - Windows

Webmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:webmin"; if...

Webmin < 1.200 Unauthorized Configuration File Access

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.200. It is, therefore, affected by an issue which may allow a remote attacker to access and alter certain configuration files, which could lead to privilege escalation or other attacks. C Tenable...

Webmin < 1.760 xmlrpc.cgi Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.760. It is, therefore, affected by a cross site scripting vulnerability in xmlrpc.cgi, which could potentially lead to remote code execution in certain products. C Tenable Network Security, Inc...

Webmin < 1.350 pam_login.cgi Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.350. It is, therefore, affected by a number of cross site scripting vulnerabilities in pamlogin.cgi C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108551;...

Webmin 0.80 / 0.88 world-writable files

According to its self-reported version, the Webmin install hosted on the remote host is 0.80 or 0.88. It is, therefore, affected by an issue in run.cgi which allows for the creation of temporary files with world-writable permissions, which could lead to arbitrary code execution. C Tenable Network...

Webmin 0.96 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is 0.96 It is, therefore, affected by multiple vulnerabilities: - A cross site scripting vulnerability which may allow attackers to insert arbitrary code. CVE-2002-0756 - An authentication bypass which may allow...

Webmin 1.x < 1.160 Remote Code Execution

According to its self-reported version, the Webmin install hosted on the remote host is 1.x prior to 1.160. It is, therefore, affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108546; scriptversion"1.5";...

Webmin 0.99 Remote Code Exection

According to its self-reported version, the Webmin install hosted on the remote host is 0.99 It is, therefore, affected by a remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108540; scriptversion"1.3";...

Webmin <= 1.540 Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is 1.540 or lower. It is, therefore, affected by a cross site scripting vulnerability via a chfn command. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108554; scriptversion"1.5";...

Webmin < 1.070 authentication bypass

According to its self-reported version, the Webmin install hosted on the remote host is earlier than 1.070. It is, therefore, affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108544; scriptversion"1.5";...

Webmin < 1.500 Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.500. It is, therefore, affected by a cross site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108553; scriptversion"1.5";...

Webmin < 1.860 Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.860. It is, therefore, affected by a cross site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108561; scriptversion"1.6";...

Webmin 1.720 Read Mail Symlink Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.720 It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108556...

Webmin 0.92 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is 0.92 It is, therefore, affected by multiple vulnerabilities which could allow local users to execute script. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108538;...

Webmin < 1.230 miniserv.pl Authentication Bypass

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.230. It is, therefore, affected by a potential authentication bypass via spoofed session IDs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108548; scriptversion"1.5";...

Webmin < 1.280 Directory Traversal

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.280. It is, therefore, affected by a directory traversal vulnerability that could allow attackers to read arbitrary files. Note: This vulnerability only affects Webmin installs on Windows hosts. C...

Webmin < 1.680 view.cgi Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.680. It is, therefore, affected by a cross site scripting vulnerability in view.cgi. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108555; scriptversion"1.5";...

Webmin 1.840 / 1.880 Local File Inclusion Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108563; scriptversion"1.3"; scriptcvsdate"Date:...

Webmin < 1.830 Multiple Cross Site Scripting Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.830. It is, therefore, affected by multiple cross site scripting vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108558; scriptversion"1.4";...

Webmin 0.91 Directory Traversal

According to its self-reported version, the Webmin install hosted on the remote host is 0.91. It is, therefore, affected by a directory traversal vulnerability in editaction.cgi. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108537; scriptversion"1.5";...