Cross site scripting

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

CVE-2023-38303: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

CVE-2021-27275

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

PT-2011-4426

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via the real name parameter in the control.php file of the controlcenter. This can lead to cross-site scripting XSS attacks...