424 matches found
CVE-2014-3883
Usermin قبل الإصدار 1.600 يعاني من ثغرة حقن أوامر OS من جهة عميل بعيد عبر إجراء مستخدم، ما يسمح بتنفيذ أوامر عشوائية على النظام المستهدف. الإصلاح المستند إلى الوثائق هو التحديث إلى الإصدار 1.600 أو أحدث. التبعات المحتملة كما وردت في المصادر: إمكانية تنفيذ أوامر OS عندما يقوم المستخدم المسجل بتصرف...
CVE-2014-3883: Improper Neutralization of Special Elements used in an OS Command
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
Usermin vulnerable to cross-site scripting
Overview Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
Usermin vulnerable to OS command injection
Overview Usermin is a web-based interface used to manage webmail. Usermin contains an OS command injection vulnerability. Keigo Yamazaki of LAC Co., Ltd reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...
JVN#92737498: Usermin vulnerable to cross-site scripting
Usermin is a web-based interface used to manage webmail. Usermin contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser who is logged into Usermin. Solution Update the software Update to the latest version according to the information...
JVN#48805624: Usermin vulnerable to OS command injection
Usermin is a web-based interface used to manage webmail. Usermin contains an OS command injection vulnerability. Impact When a user that is logged into Usermin performs a specific action, an arbitrary command may be executed. Solution Update the software Update to the latest version according to...
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
CVE-2014-3924
CVE-2014-3924 affects Webmin < 1.690 and Usermin
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
CVE-2014-3924: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Webmin < 0.970 / Usermin < 0.910 Login XSS Vulnerability
Webmin and Usermin are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4568
Cross-site scripting XSS vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4568
Cross-site scripting XSS vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4568
CVE-2009-4568 affects Webmin < 1.500 and Usermin
CVE-2009-4568: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Gentoo Security Advisory GLSA 200509-17 (Webmin Usermin)
The remote host is missing updates announced in advisory GLSA 200509-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200707-05 (webmin/usermin)
The remote host is missing updates announced in advisory GLSA 200707-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200509-17 (Webmin Usermin)
The remote host is missing updates announced in advisory GLSA 200509-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...