1373 matches found
Webmin 跨站脚本漏洞
Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...
Webmin 跨站脚本漏洞
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the Add User feature. An...
Webmin 跨站请求伪造漏洞
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from a lack of token validation for cross-site request forgery in the upload and download functions...
Webmin 跨站请求伪造漏洞
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from the lack of token validation for cross-site request forgery in the file management...
The vulnerability in the implementation of the cron/save_allow.cgi script of the Scheduled Cron Jobs web interface for system administration on UNIX-like operating systems like Webmin allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the cron/saveallow.cgi implementation in the Scheduled Cron Jobs web interface for system administration on UNIX-like operating systems, such as Webmin, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain...
Webmin Command Injection Vulnerability
An issue was discovered in Webmin. The parameter old in passwordchange.cgi contains a command injection vulnerability...
Exploit for Improper Access Control in Webmin
CVE-2022-0824 !Dockerhttps://github.com/cryst4lliz3/CVE-2...
Exploit for Improper Access Control in Webmin
CVE-2022-0824 !Dockerhttps://github.com/cryst4lliz3/CVE-2...
ROS-20220318-01
A vulnerability in the Webmin administration software suite is related to incorrect access restrictions in the File Manager module. Exploitation of the vulnerability could allow a remote attacker to bypass the security restrictions and compromise a vulnerable system. security restrictions and...
Webmin 1.984 - Remote Code Execution (Authenticated) Exploit
Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18 Reference:...
Webmin 1.984 Remote Code Execution
Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Date: 2022-03-06 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18...
Webmin 1.984 - Remote Code Execution (Authenticated)
Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Date: 2022-03-06 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18...
Mageia: Security Advisory (MGASA-2022-0090)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0090 Updated webmin packages fix security vulnerability
Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default Authentic theme CVE-2022-0824, CVE-2022-0829...
Updated webmin packages fix security vulnerability
Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default Authentic theme CVE-2022-0824, CVE-2022-0829...
Exploit for Improper Access Control in Webmin
Webmin-CVE-2022-0824-revshell Vulnerability Description...
Webmin authorization issue vulnerability
Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. an authorization issue vulnerability exists in versions of Webmin prior to 1.990, which stems from a lack of authentication measures or insufficient authentication strength in a networked...
webmin Elevation of Privilege Vulnerability (CNVD-2022-17023)
Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. webmin versions prior to 1.990 have an elevation of privilege vulnerability that stems from a faulty program to high-level local procedure calls. An attacker could exploit this vulnerability...
Webmin <= 1.984 Multiple Vulnerabilities
Webmin is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
