PT-2022-10066

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists via the Scheduled Cron Jobs feature. Recommendations For Webmin version 1.973, consider disabling the Scheduled Cron Jobs feature until a patch is available...

CVE-2021-32158: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Upload and Download feature...

PT-2022-10067

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists via the Upload and Download feature. Recommendations For Webmin version 1.973, consider disabling the Upload and Download feature until a patch is available. Restrict...

CVE-2021-32159: Cross-Site Request Forgery (CSRF)

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Upload and Download feature...

Webmin 跨站请求伪造漏洞

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from a lack of token validation for cross-site request forgery in the upload and download functions...

CVE-2021-32156: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

Webmin 跨站脚本漏洞

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. version 1.973 of Webmin contains a cross-site scripting vulnerability that stems from a lack of filtering and escaping in the scheduled Cron jobs feature. An attacker could use this...

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the upload and download...

PT-2022-10068

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-site request forgery CSRF vulnerability exists in the Upload and Download feature. This issue allows an attacker to trick a user into performing unintended actions on the web application. Recommendation...

PT-2022-10071

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-site request forgery CSRF vulnerability exists in the File Manager feature. This issue allows for malicious requests to be made on behalf of the user, potentially leading to unauthorized actions...

CVE-2021-32161: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32160: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...

CVE-2021-32157: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32162: Cross-Site Request Forgery (CSRF)

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

Webmin 跨站请求伪造漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.Webmin version 1.973 is vulnerable to cross-site request forgery, which stems from the lack of token validation for cross-site request forgery in the scheduled Cron job function. An...

The vulnerability in the implementation of the cron/save_allow.cgi script of the Scheduled Cron Jobs web interface for system administration on UNIX-like operating systems like Webmin allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cron/saveallow.cgi implementation in the Scheduled Cron Jobs web interface for system administration on UNIX-like operating systems, such as Webmin, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain...

Webmin Command Injection Vulnerability

An issue was discovered in Webmin. The parameter old in passwordchange.cgi contains a command injection vulnerability...

Exploit for Improper Access Control in Webmin

CVE-2022-0824 !Dockerhttps://github.com/cryst4lliz3/CVE-2...

Exploit for Improper Access Control in Webmin

CVE-2022-0824 !Dockerhttps://github.com/cryst4lliz3/CVE-2...

ROS-20220318-01

A vulnerability in the Webmin administration software suite is related to incorrect access restrictions in the File Manager module. Exploitation of the vulnerability could allow a remote attacker to bypass the security restrictions and compromise a vulnerable system. security restrictions and...