Webmin < 1.760 xmlrpc.cgi Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.760. It is, therefore, affected by a cross site scripting vulnerability in xmlrpc.cgi, which could potentially lead to remote code execution in certain products. C Tenable Network Security, Inc...

Webmin 1.840 / 1.880 Local File Inclusion Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108563; scriptversion"1.3"; scriptcvsdate"Date:...

Webmin < 1.680 view.cgi Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.680. It is, therefore, affected by a cross site scripting vulnerability in view.cgi. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108555; scriptversion"1.5";...

Webmin < 1.830 Multiple Cross Site Scripting Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.830. It is, therefore, affected by multiple cross site scripting vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108558; scriptversion"1.4";...

Webmin 0.96 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is 0.96 It is, therefore, affected by multiple vulnerabilities: - A cross site scripting vulnerability which may allow attackers to insert arbitrary code. CVE-2002-0756 - An authentication bypass which may allow...

Webmin < 1.870 Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.870. It is, therefore, affected by a cross site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108562; scriptversion"1.4";...

Webmin 0.21 <= 1.0 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is between versions 0.21 and 1.0. It is, therefore, affected by multiple vulnerabilities: - Versions 0.21 through 1.00 use the same SSL key for all installations, which may allow attackers to eavesdrop on traffic...

Webmin < 1.200 Unauthorized Configuration File Access

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.200. It is, therefore, affected by an issue which may allow a remote attacker to access and alter certain configuration files, which could lead to privilege escalation or other attacks. C Tenable...

Webmin 1.720 Read Mail Symlink Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.720 It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108556...

Webmin < 1.250 miniserv.pl Remote Code Execution

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.250. It is, therefore, affected by a remote code execution vulnerability if syslog logging is enabled. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108549;...

Webmin < 1.350 pam_login.cgi Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.350. It is, therefore, affected by a number of cross site scripting vulnerabilities in pamlogin.cgi C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108551;...

Webmin < 1.230 miniserv.pl Authentication Bypass

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.230. It is, therefore, affected by a potential authentication bypass via spoofed session IDs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108548; scriptversion"1.5";...

Webmin 1.880 Information Disclosure Vulnerability

Webmin is prone to an information disclosure vulnerability that allows non-privileged users to access arbitrary files. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

Default configuration

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712

Webmin 1.840/1.880 expose a Local File Inclusion flaw due to weak default config: enabling "Can view any file as a log file" lets non-privileged users read sensitive local files (e.g., /etc/shadow) via GET /syslog/save_log.cgi?view=1&file=/etc/shadow. Root cause: default settings grant access to ...

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...

CVE-2018-8712: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...