EUVD-2020-29667

Malware in sbrugna...

MGASA-2020-0400 Updated webmin package fixes security vulnerabilities

An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. CVE-2020-8820 An...

PT-2020-20304

Name of the Vulnerable Software and Affected Versions Webmin versions 1.941 and earlier Description The issue is related to improper data validation in the Command Shell Endpoint, allowing a user to enter HTML code into the Command field. After submitting the code and visiting the Action Logs Men...

CVE-2020-8821: Improper Neutralization of Input During Web Page Generation

An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered however, JavaScript is...