Webmin 0.80 / 0.88 world-writable files

According to its self-reported version, the Webmin install hosted on the remote host is 0.80 or 0.88. It is, therefore, affected by an issue in run.cgi which allows for the creation of temporary files with world-writable permissions, which could lead to arbitrary code execution. C Tenable Network...

CVE-2017-17089: Improper Neutralization of Input During Web Page Generation

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

CVE-2001-1530

CVE-2001-1530 affects Webmin 0.80 and 0.88. The vulnerability is in run.cgi, which creates temporary files with world-writable permissions. This allows local users to execute arbitrary commands. The connected Red Hat/Nessus entries corroborate the effect, describing the same root cause and impact...

CVE-2001-1530: Undefined Security Weakness

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands...