424 matches found
JVN#32504719: Usermin cross-site scripting vulnerabilities
Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the software...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the usermin package up to version 1.070-r1 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the usermin package up to version 1.090 of the Gentoo Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Usermin Detection
Binary data usermindetect.nbin...
Usermin Null Byte Filtering Information Disclosure
The version of Usermin installed on the remote host is affected by an information disclosure vulnerability due to the Perl script 'miniserv.pl' failing to properly filter null characters from URLs. An attacker could exploit this to reveal the source code of CGI scripts, obtain directory listings,...
Usermin < 1.600 Multiple Vulnerabilities
According to its self-reported version number, the Usermin install hosted on the remote web server is prior to 1.600. It is, therefore, affected by the following vulnerabilities : - An unspecified remote command execution vulnerability. CVE-2014-3883 - Multiple cross-site scripting XSS...
Usermin 'miniserv.pl' Arbitrary File Disclosure
The Usermin install on the remote host is affected by an information disclosure flaw in the Perl script 'miniserv.pl'. This flaw could allow a remote, unauthenticated attacker to read arbitrary files on the affected host, subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C...
CVE-2014-3884
Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
Cross site scripting
Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
CVE-2014-3884
CVE-2014-3884 is an XSS vulnerability in Usermin prior to version 1.600 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The entry notes potential overlap with CVE-2014-3924, but the provided documents do not specify exploit details, affected configurat...
CVE-2014-3884
Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
CVE-2014-3884: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
SOL15399 - Usermin remote vulnerability CVE-2014-3883
The vulnerability described in this article has been resolved, or does not affect any F5 products. There will be no further updates, unless new information is discovered...
Webmin 1.x HTML Email Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11122/info Webmin / Usermin are reportedly affected by a command execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages and may allow an attacker to...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
No description provided by source...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)
No description provided by source...
Webmin 0.9x,Usermin 0.9x/1.0 Session ID Spoofing Unauthenticated Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6915/info A vulnerability has been discovered in the 'Miniserv.pl' script used to invoke both Webmin and Usermin. Due to insufficient sanitization of client-supplied BASE64 encoded input, it is possible to inject a Sessio...
CVE-2014-3883
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...