Lucene search
+L

1373 matches found

Cvelist
Cvelist
added 2022/05/15 2:30 a.m.30 views

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

8.8CVSS9.2AI score0.03484EPSS
SaveExploits1References8
OSV
OSV
added 2022/05/15 2:30 a.m.17 views

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

8.8CVSS7.8AI score0.03484EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2022/05/15 12:0 a.m.12 views

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...

8.8CVSS8.5AI score0.03484EPSS
SaveExploits1References10
GithubExploit
GithubExploit
added 2022/04/26 1:49 a.m.246 views

Exploit for Cross-site Scripting in Webmin

CVE-2021-32157 Make it possible to build a vulnerable webmin v...

9.6CVSS9.4AI score0.04036EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
added 2022/04/19 12:0 a.m.12 views

Webmin Remote Code Execution (CVE-2022-0824)

A remote code execution vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.6AI score0.96977EPSS
SaveExploits13
CNVD
CNVD
added 2022/04/13 12:0 a.m.32 views

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61348)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the Add User feature. An...

6.1CVSS2.9AI score0.02001EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.45 views

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61350)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the upload and download...

6.1CVSS3.6AI score0.02001EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.39 views

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61347)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from a lack of filtering and escaping of user-submitted parameters in the file management...

6.1CVSS3.3AI score0.02001EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.24 views

Webmin Cross-site Request Forgery Vulnerability (CNVD-2022-61346)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from the lack of token validation for cross-site request forgery in the file management...

8.8CVSS2.7AI score0.02562EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.34 views

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61345)

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...

9.6CVSS2.9AI score0.04036EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.46 views

Webmin Cross-site Request Forgery Vulnerability (CNVD-2022-61344)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.Webmin version 1.973 is vulnerable to cross-site request forgery, which stems from the lack of token validation for cross-site request forgery in the scheduled Cron job function. An...

8.8CVSS2.7AI score0.02309EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.37 views

Webmin Cross-Site Request Forgery Vulnerability (CNVD-2022-61349)

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from a lack of token validation for cross-site request forgery in the upload and download functions...

8.8CVSS8.6AI score0.02309EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/11 6:15 a.m.14 views

CVE-2021-32160

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...

6.1CVSS0.02001EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/11 6:15 a.m.20 views

CVE-2021-32159

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Upload and Download feature...

8.8CVSS7.1AI score0.02309EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/11 6:15 a.m.24 views

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

8.8CVSS6.9AI score0.02309EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/11 6:15 a.m.24 views

CVE-2021-32160

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...

6.1CVSS5.8AI score0.02001EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/11 6:15 a.m.24 views

CVE-2021-32161

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

6.1CVSS5.8AI score0.02001EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/11 6:15 a.m.16 views

CVE-2021-32158

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Upload and Download feature...

6.1CVSS0.02001EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/11 6:15 a.m.21 views

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

9.6CVSS0.04036EPSS
SaveExploits2References1
NVD
NVD
added 2022/04/11 6:15 a.m.12 views

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

8.8CVSS0.02309EPSS
SaveExploits1References1
Rows per page
Query Builder