CVE-2023-40985

Summary (CVE-2023-40985): Webmin 2.100’s File Manager contains a Cross-Site Scripting (XSS) vulnerability. A crafted payload injected by an attacker can execute arbitrary code in the victim’s browser when files are searched or replaced. Impact, as described in sources, is browser-side code execut...

CVE-2023-40985

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file ...

CVE-2023-40983

CVE-2023-40983 is a reflected cross-site scripting (XSS) vulnerability in Webmin v2.100’s File Manager, exploitable by injecting a crafted payload via the Find in Results file. The impact is execution of malicious scripts, with the NVD/CVE entries and multiple downstream feeds confirming this XSS...

CVE-2023-40984: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

CVE-2023-40982: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

CVE-2023-40985: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file ...

CVE-2023-40984

The CVE-2023-40984 entry concerns Webmin v2.100 with a reflected XSS in the File Manager function, exploitable by injecting a crafted payload into the Replace in Results file. The vulnerability is caused by improper input handling in the File Manager, enabling an attacker to execute script code i...

CVE-2023-40982

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

CVE-2023-40982

A stored cross-site scripting XSS vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter...

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

CVE-2023-40986

CVE-2023-40986 concerns a stored XSS in the Usermin Configuration function of Webmin v2.100, triggered by a crafted payload in the Custom field that can cause arbitrary web scripts/HTML execution. The connected sources (Red Hat advisory, CVE records, Nessus/DSS descriptions, and CVE lists) consis...

CVE-2023-40986

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

CVE-2023-40986: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field...

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

CVE-2023-40983

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

CVE-2023-40983: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...

PT-2023-27730 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin version 2.100 Description: A reflected cross-site scripting XSS issue in the File Manager function allows attackers to execute malicious scripts by injecting a crafted payload into the Find in Results file. This enables the execution o...