Webmin and Usermin authentication bypass vulnerability

Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...

Webmin directory traversal vulnerability

Overview Webmin is a web-based system management tool. Webmin contains a directory traversal vulnerability which allows to bypass authentication. As of June 30, 2006, patched versions of the module addressing this vulnerability for all OS platforms are available from the vendor. This vulnerabilit...

Multiple vulnerabilities in Webmin and Usermin

Overview Webmin and Usermin, web-based system management tools, contain the following vulnerabilities: - Execution of arbitrary files and viewing source code by bypassing Webmin and Usermin's access restrictions - Cross-site scripting We are aware that these vulnerabilities have been addressed in...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

CVE-2008-0720

Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 contain a cross-site scripting (XSS) vulnerability in the webmin_search.cgi component, exploitable via the search parameter. The issue may affect other components reachable through a search box or open file box. The vulnerability is publicly docu...

Tested on Webmin 1.390

Aria-Security Team Persian Security Network http://Aria-Security.Net ---------------------------------- Tested on Webmin 1.390 Cross Site Scripting This vuln was tested on Webmin as an administrator account root and it has worked on the search section file of the system. Value Inserted:...

webmin1390-xss.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ---------------------------------- Tested on Webmin 1.390 Cross Site Scripting This vuln was tested on Webmin as an administrator account root and it has worked on the search section file of the system. Value Inserted:...

Debian Security Advisory DSA 526-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 526-1. OpenVAS Vulnerability Test $Id: deb5261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 526-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 526-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 526-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-544-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1199-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1199-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 1199-1. Several vulnerabilities have been identified in webmin, a web-based administration toolkit. CVE-2005-3912 A format string vulnerability in miniserv.pl could allow an attacker to cause a denial of service by crashing...

Debian Security Advisory DSA 319-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 319-1. OpenVAS Vulnerability Test $Id: deb3191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 319-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 319-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 319-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 544-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 544-1. OpenVAS Vulnerability Test $Id: deb5441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 544-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Webmin File Disclosure

A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to read the contents of any files on the...

Webmin远程目录遍历漏洞

BUGTRAQ ID: 18613 Webmin是一款基于WEB的Unix和Linux操作系统系统管理接口。 Webmin对用户请求的处理上存在目录遍历漏洞，远程攻击者可能利用此漏洞遍历服务器目录非授权访问文件。 Webmin没有正确的过滤反斜线（“\”）。在Windows平台上，这允许攻击者访问公共目录和文件以外的内容。在Webmin的默认配置中，远程攻击者可以利用目录遍历攻击下载任意文件。 Webmin Webmin http://www.webmin.com/webmin/...

CVE-2002-2360

CVE-2002-2360 affects Webmin 0.21–0.99. The RPC module, when installed without root/admin privileges, allows remote attackers to read and write arbitrary files and to execute arbitrary commands via remote_foreign_require and remote_foreign_call requests. The vulnerability is associated with remot...