Mageia: Security Advisory (MGASA-2022-0216)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0216 Updated webmin packages fix security vulnerability

Less privileged Webmin users excluding those created by Virtualmin and Cloudmin can modify arbitrary files with root privileges, and so run commands as root CVE-2022-30708...

Updated webmin packages fix security vulnerability

Less privileged Webmin users excluding those created by Virtualmin and Cloudmin can modify arbitrary files with root privileges, and so run commands as root CVE-2022-30708...

PT-2022-37684

Уязвимость панели управления хостингом Webmin связана с некорректными разрешениями и привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти существующие ограничения безопасности...

Webmin <= 1.991 Privilege Escalation Vulnerability

Webmin is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

Remote code execution

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

CVE-2022-30708

The CVE-2022-30708 issue affects Webmin up to version 1.991 when the Authentic theme is used and a manually created user exists, allowing remote code execution due to improper restriction of the file parameter in settings-editor_write.cgi. Risk posture is supported by multiple sources (Mageia MGA...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

CVE-2022-30708: Undefined Security Weakness

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

PT-2022-20245

Name of the Vulnerable Software and Affected Versions Webmin versions 1.991 and earlier Description The issue allows remote code execution when the Authentic theme is used and a user has been manually created. This occurs because the settings-editor write.cgi script does not properly restrict the...

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...

rce_webmin

rcewebmin RCE and privilege escalation webmin version 1.991...

Exploit for Cross-site Scripting in Webmin

CVE-2021-32157 Make it possible to build a vulnerable webmin v...

Webmin Remote Code Execution (CVE-2022-0824)

A remote code execution vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61347)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from a lack of filtering and escaping of user-submitted parameters in the file management...

Webmin Cross-Site Scripting Vulnerability (CNVD-2022-61345)

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...