Cross site scripting

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3886

CVE-2014-3886 is a Webmin vulnerability: Webmin before 1.690 is vulnerable to cross-site scripting when referrer checking is disabled, allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The issue is identified in multiple sources (NVD entry and Nessus/NVD cross-li...

CVE-2014-3885

CVE-2014-3885 is an XSS vulnerability in Webmin prior to 1.690. It affects authenticated users who can inject arbitrary web script or HTML via unspecified vectors. The issue is tied to Webmin versions

CVE-2014-3886

Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3886: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

PT-2014-5578

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML when referrer checking is disabled. Recommendations For versions prior to 1.690, update to version 1.690...

PT-2014-5577

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. Recommendations For versions prior to 1.690, update to version 1.690 or later to resolve the...

Webmin 1.x HTML Email Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11122/info Webmin / Usermin are reportedly affected by a command execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages and may allow an attacker to...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit

No description provided by source...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)

No description provided by source...

webmin 0.91 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3698/info Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms, you can setup user accounts, Apache, DNS, file sharing and so on. Webmin will run on most Uni...

Webmin 0.x RPC Function Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5591/info In cases where users of Webmin do not have root access on the underlying host, it may be possible to mount privilege escalation attacks on the underlying host. This normally occurs in configurations where multip...

Webmin /file/show.cgi Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Webmin 0.9x,Usermin 0.9x/1.0 Session ID Spoofing Unauthenticated Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6915/info A vulnerability has been discovered in the 'Miniserv.pl' script used to invoke both Webmin and Usermin. Due to insufficient sanitization of client-supplied BASE64 encoded input, it is possible to inject a Sessio...

Webmin 1.5 - BruteForce + Command Execution

No description provided by source. !/usr/bin/perl Webmin BruteForce + Command execution v1.0:By Di42lo - [email protected] v1.5:By ZzagorR - [email protected] - www.rootbinbash.com add script: 1.wordlist func. 2.log line:41 usage: ./webmin1.pl host command wordlist ./webmin1.pl...

Webmin 0.x Script Code Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4329/info Webmin is a web-based interface for system administration of Unix and Linux operating systems. Webmin does not filter script code from output that may be displayed by the web interface, such as log files, etc...

Webmin 1.5 - Web Brute Force (cgi-version)

No description provided by source. !/usr/bin/perl use CGI qw:standard; use IO::Socket; $CGI::HEADERSONCE = 1; $CGI = new CGI; $atak = $CGI-paramatak; $host = $CGI-paramhost; $wlist = $CGI-paramwlist; $cmd = $CGI-paramcmd; print $CGI-header-type='text/html',-charset='windows-1254'; print...

DansGuardian Webmin Module 0.x Edit.CGI Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9394/info A problem has been identified in the handling of input by scripts packaged with the DansGuardian Webmin Module. Because of this, it is possible for a remote to gain access to potentially sensitive information...