Virtualmin Cross-Site Scripting Vulnerability

Virtualmin is a powerful and flexible web hosting control panel for Linux and BSD systems from Virtualmin. A security vulnerability exists in Virtualmin version 7.7 that stems from a cross-site scripting XSS vulnerability in the Create Virtual Server feature...

CVE-2023-47095

CVE-2023-47095 is a stored XSS vulnerability affecting Virtualmin 7.7 in the Custom fields of Edit Virtual Server under System Customization. The issue allows remote attackers to inject arbitrary web script or HTML via the Batch Label field. The available sources describe the affected product and...

CVE-2023-47099

CVE-2023-47099 is a stored XSS in Virtualmin’s Create Virtual Server feature affecting Virtualmin 7.7. The vulnerability stems from insufficient sanitization of the Description field during Virtual Server creation, allowing remote attackers to inject arbitrary script/HTML. Impact is XSS in the se...

CVE-2023-47098

A Stored Cross-Site Scripting XSS vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the real name or description field...

SUSE CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...

Arbitrary Password Reset

Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

Design/Logic Flaw

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

Design/Logic Flaw

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18208

CVE-2018-18208 affects Virtualmin 6.03 and enables reflected XSS via the query string, demonstrated through the webmin_search.cgi URI. The connected sources confirm the vulnerable component (Webmin/Virtualmin search endpoint) and the input vector (query string) but do not provide explicit exploit...

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18207

CVE-2018-18207 affects Virtualmin 6.03. The vulnerability arises from a flaw in the settings-editor_read.cgi file parameter, enabling Frame Injection . Exploitation details or successful exploit status are not provided in the connected documents. No remediation details are specified here.

CVE-2018-18208: Improper Neutralization of Input During Web Page Generation

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

Virtualmin 6.03 Multiple Vulnerabilities

Exploit for cgi platform in category web applications Exploit Title: Virtualmin 6.03 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: https://www.virtualmin.com/ Software Link: https://www.virtualmin.com/download.html Version: 6.03...

CVE-2018-18207: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...