Webmin Directory Traversal Vulnerability (CNVD-2015-01161)

Webmin is a Unix system administration Web interface that allows you to set up user accounts, Apache, DNS, DNS, file sharing and more from any browser. A directory traversal vulnerability in Webmin 1.720 allows local users to read arbitrary files via an unspecified file symlink attack...

CVE-2015-1377

The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...

Design/Logic Flaw

The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...

CVE-2015-1377

Webmin Read Mail Module Information Disclosure (CVE-2015-1377): Webmin 1.720 is vulnerable to a local symlink attack that permits local users to read arbitrary files via the Read Mail module. The issue is confirmed in multiple security feeds (NVD entry for CVE-2015-1377; Nessus/OPENVAS plugins re...

CVE-2015-1377

The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...

MGASA-2015-0007 Updated webmin packages fix security vulnerabilities

Updated webmin package fixes security vulnerability: The webmin package has been updated to version 1.730 to fix possible security issues that could be caused by malicious symlinks when reading mail. The updated version also has various bug fixes, translation updates, and functionality...

Updated webmin packages fix security vulnerabilities

Updated webmin package fixes security vulnerability: The webmin package has been updated to version 1.730 to fix possible security issues that could be caused by malicious symlinks when reading mail. The updated version also has various bug fixes, translation updates, and functionality...

Webmin < 1.690 Multiple XSS

According to its self-reported version, the Webmin install hosted on the remote host is prior to version 1.690. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - The application is affected by multiple unspecified cross-site scripting vulnerabilities. CVE-2014-3885 -...

Details Disclosed on Patched Webmin Vulnerability

The University of Texas information security office yesterday disclosed the details on a critical vulnerability in Webmin that was patched in May, days after it was reported. The bug in the UNIX remote management tool provided remote root access to a host server. Authenticated users would then be...

CVE-2014-3886

Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3886

CVE-2014-3886 is a Webmin vulnerability: Webmin before 1.690 is vulnerable to cross-site scripting when referrer checking is disabled, allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The issue is identified in multiple sources (NVD entry and Nessus/NVD cross-li...

CVE-2014-3885

CVE-2014-3885 is an XSS vulnerability in Webmin prior to 1.690. It affects authenticated users who can inject arbitrary web script or HTML via unspecified vectors. The issue is tied to Webmin versions

CVE-2014-3886

Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)

No description provided by source...

Webmin 1.5 - Web Brute Force (cgi-version)

No description provided by source. !/usr/bin/perl use CGI qw:standard; use IO::Socket; $CGI::HEADERSONCE = 1; $CGI = new CGI; $atak = $CGI-paramatak; $host = $CGI-paramhost; $wlist = $CGI-paramwlist; $cmd = $CGI-paramcmd; print $CGI-header-type='text/html',-charset='windows-1254'; print...

Webmin 0.x Script Code Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4329/info Webmin is a web-based interface for system administration of Unix and Linux operating systems. Webmin does not filter script code from output that may be displayed by the web interface, such as log files, etc...