CVE-2007-1276

The CVE-2007-1276 entry describes multiple cross-site scripting (XSS) vulnerabilities in Webmin’s chooser.cgi, affecting Webmin versions before 1.330 and Usermin versions before 1.260. The root cause is improper handling of crafted filename input in chooser.cgi, enabling remote attackers to injec...