Lucene search
+L

1373 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.11 views

The vulnerability of the Webmin control panel allows attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00489EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.14 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00533EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.10 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00531EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.10 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.8CVSS5.8AI score0.00405EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.9 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00485EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.12 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.0062EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.10 views

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00407EPSS
SaveExploits1References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.6 views

CVE-2023-38309

An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting XSS vulnerability was discovered in the package search functionality. The vulnerability allows an attacker to inject a malicious payload in the "Search for Package" field, which gets reflected back in the application's...

6.1CVSS6.7AI score0.0062EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.7 views

CVE-2023-38305

An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a crafted download path containing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the...

6.1CVSS6.5AI score0.00533EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.3 views

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

5.4CVSS6.1AI score0.00405EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.6 views

CVE-2023-38311

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the System Logs Viewer functionality. The vulnerability allows an attacker to store a malicious payload in the configuration field, triggering the execution of the payload when saving the...

5.4CVSS6.2AI score0.00485EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/31 3:15 p.m.50 views

CVE-2023-38308

An issue was discovered in Webmin 2.021. A Cross-Site Scripting XSS vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitra...

6.1CVSS6AI score0.00615EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/31 3:15 p.m.17 views

CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

5.4CVSS5.6AI score0.00708EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.7 views

CVE-2023-38308

An issue was discovered in Webmin 2.021. A Cross-Site Scripting XSS vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitra...

6.1CVSS6.7AI score0.00615EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/31 3:15 p.m.44 views

CVE-2023-38310

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in...

5.4CVSS5.2AI score0.00489EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/31 3:15 p.m.23 views

CVE-2023-38309

An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting XSS vulnerability was discovered in the package search functionality. The vulnerability allows an attacker to inject a malicious payload in the "Search for Package" field, which gets reflected back in the application's...

6.1CVSS6.1AI score0.0062EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.5 views

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

5.4CVSS6.1AI score0.00407EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/31 3:15 p.m.29 views

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

5.4CVSS5.2AI score0.00407EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/31 3:15 p.m.29 views

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

5.4CVSS5.1AI score0.00405EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.5 views

CVE-2023-38310

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in...

5.4CVSS6.2AI score0.00489EPSS
SaveExploits1References3
Rows per page
Query Builder