Webmin vulnerable to cross-site scripting

Overview Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. hasegawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Webmin vulnerable to cross-site scripting

Overview Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability. Yoshinori Matsumoto of Kobe Digital Labo, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

JVN#02213197: Webmin vulnerable to cross-site scripting

Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. Impact An arbitrary script may be executed on a user's web browser who is logged into Webmin. Solution...

JVN#49974594: Webmin vulnerable to cross-site scripting

Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser who is logged into Webmin. Solution Update the software Update to the latest version according to the information provided by th...

CVE-2014-3924

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

CVE-2014-3924

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

CVE-2014-3924

CVE-2014-3924 affects Webmin < 1.690 and Usermin

PT-2014-5610

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Usermin versions prior to 1.600 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via vectors related to...

CVE-2014-3924: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...

MGASA-2014-0233 Updated webmin package fixes security vulnerabilities

Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...

Updated webmin package fixes security vulnerabilities

Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...

PT-2014-9131

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.690 Description A security issue in the cron module and several XSS issues in pop-up windows have been identified. The estimated number of potentially affected devices worldwide is not specified. There is no...

[ MDVSA-2014:062 ] webmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:062 http://www.mandriva.com/en/support/security/ Package : webmin Date : March 17, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and...

http-vuln-cve2006-3392 NSE Script

Exploits a file disclosure vulnerability in Webmin CVE-2006-3392 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML. This allows arbitrary files to be read, without requiring authentication, using "..%01" sequences to bypass the removal of "../"...

Webmin 'view.cgi'跨站脚本漏洞

Bugtraq ID:66248 CVE ID:CVE-2014-0339 Webmin是一款基于WEB的Unix和Linux操作系统系统管理接口。 Webmin 'view.cgi'不正确过滤"search"参数数据，允许远程攻击者利用漏洞进行反射型跨站脚本攻击，可获取敏感信息或劫持用户会话。 0 Webmin 1.670 目前没有详细解决方案提供： http://www.webmin.com https://192.168.49.132:10000/webminlog/view.cgi?id=1&search=e";scriptalertdocument.cookie;/script...

Mandriva Linux Security Advisory : webmin (MDVSA-2014:062)

Multiple vulnerabilities was discovered and corrected in webmin : Multiple XSS, CSRF, and arbitrary code execution vulnerabilities that impact Webmin versions prior to 1.620 CVE-2012-2981, CVE-2012-2982, CVE-2012-2983, CVE-2012-4893, SA51201. The 1.680 version fixed security issues that could be...

CVE-2014-0339

Cross-site scripting XSS vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2014-0339

Webmin is vulnerable to a cross-site scripting (XSS) flaw in view.cgi prior to version 1.680. The underlying issue is improper validation of the search parameter, allowing remote attackers to inject arbitrary script/HTML. Public references and bulletins consistently describe the affected componen...