CVE-2021-3149

On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manualping.cgi allows OS command injection after authentication by the attacker because the system C library function is used unsafely...

CVE-2021-3149

CVE-2021-3149 affects Netshield NANO 25 devices running 10.2.18. The issue is an OS command injection via /usr/local/webmin/System/manual_ping.cgi after authentication, caused by unsafe use of a C library function. Public documents in the set confirm affected product, vulnerable component/file, a...

Webmin 1.890 XSS

A cross-site scripting XSS vulnerability exists in Webmin 1.890 due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's...

Webmin <= 1.941 Multiple Vulnerabilities

According to its self-reported version, the version of Webmin on the remote host is affected by multiple vulnerabilities, including the following: - An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the...

Webmin <= 1.930 XXE

An XML external entity XXE vulnerability exists in Webmin through 1.930 in xmlrpc.cgi due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote, authenticated attacker can exploit this,via specially crafted XML data, to disclose sensitive...

Webmin < 1.970 Multiple Vulnerabilities

According to its self-reported version, the version of Webmin running on the remote host may be affected by multiple vulnerabilities, including the following: - Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary...

Webmin 1.840 / 1.880 LFI

A local file inclusion vulnerability exists in Webmin 1.840 and 1.880 when the default Yes setting of 'Can view any file as a log file' is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to...

Webmin <= 1.910 Remote Command Execution

A remote command execution vulnerability exists in Package Updates module. An authenticated, remote attacker can exploit this if they are authorized to the Package Updates module via the data parameter to update.cgi in order to execute arbitrary commands with root privileges. C Tenable Network...

Webmin Command Injection (CVE-2020-35606; CVE-2022-36446)

A command injection vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Webmin < 1.970 RCE Vulnerability

miniserv.pl in Webmin on Windows mishandles special characters in query arguments to the CGI program. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Webmin Input Validation Error Vulnerability

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. An input validation error vulnerability exists in Webmin version 1.962, which stems from miniserv.pl incorrectly handling special characters in the query parameters of a CGI program, and...

CVE-2020-35769

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

CVE-2020-35769

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

Code injection

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

CVE-2020-35769

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

CVE-2020-35769

Summary: CVE-2020-35769 affects Webmin 1.962 on Windows, via miniserv.pl mishandling special characters in CGI query parameters. This has been linked to remote command execution (in-the-wild vectors reported in multiple advisories) with CVSS 3.1/2.0 vectors indicating high/critical impact. Connec...

CVE-2020-35769

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

CVE-2020-35769: Undefined Security Weakness

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

Webmin 输入验证错误漏洞

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. An input validation error vulnerability exists in Webmin version 1.962, which stems from miniserv.pl incorrectly handling special characters in the query parameters of a CGI program, and...

PT-2020-17415

Name of the Vulnerable Software and Affected Versions Webmin version 1.962 Description The issue concerns the miniserv.pl component in Webmin, which mishandles special characters in query arguments to the CGI program. This can be exploited when sending queries to the miniserv.pl CGI endpoint,...