1378 matches found
CVE-2014-3924
Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...
Updated webmin package fixes security vulnerabilities
Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...
MGASA-2014-0233 Updated webmin package fixes security vulnerabilities
Updated webmin package fix security vulnerabilities: Webmin has been updated to version 1.690, which fixes a security issue in the cron module and several XSS issues in pop-up windows...
[ MDVSA-2014:062 ] webmin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:062 http://www.mandriva.com/en/support/security/ Package : webmin Date : March 17, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and...
http-vuln-cve2006-3392 NSE Script
Exploits a file disclosure vulnerability in Webmin CVE-2006-3392 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML. This allows arbitrary files to be read, without requiring authentication, using "..%01" sequences to bypass the removal of "../"...
Webmin 'view.cgi'跨站脚本漏洞
Bugtraq ID:66248 CVE ID:CVE-2014-0339 Webmin是一款基于WEB的Unix和Linux操作系统系统管理接口。 Webmin 'view.cgi'不正确过滤"search"参数数据，允许远程攻击者利用漏洞进行反射型跨站脚本攻击，可获取敏感信息或劫持用户会话。 0 Webmin 1.670 目前没有详细解决方案提供： http://www.webmin.com https://192.168.49.132:10000/webminlog/view.cgi?id=1&search=e";scriptalertdocument.cookie;/script...
Mandriva Linux Security Advisory : webmin (MDVSA-2014:062)
Multiple vulnerabilities was discovered and corrected in webmin : Multiple XSS, CSRF, and arbitrary code execution vulnerabilities that impact Webmin versions prior to 1.620 CVE-2012-2981, CVE-2012-2982, CVE-2012-2983, CVE-2012-4893, SA51201. The 1.680 version fixed security issues that could be...
CVE-2014-0339
Cross-site scripting XSS vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2014-0339
Webmin is vulnerable to a cross-site scripting (XSS) flaw in view.cgi prior to version 1.680. The underlying issue is improper validation of the search parameter, allowing remote attackers to inject arbitrary script/HTML. Public references and bulletins consistently describe the affected componen...
CVE-2014-0339
Cross-site scripting XSS vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
MGASA-2014-0132 Updated webmin package fixes security vulnerabilities
Webmin has been updated to version 1.680, which fixes some security issues in the PHP Configuration and Webalizer modules, as well as several other bugs...
Updated webmin package fixes security vulnerabilities
Webmin has been updated to version 1.680, which fixes some security issues in the PHP Configuration and Webalizer modules, as well as several other bugs...
Webmin 1.670 Cross Site Scripting
I. VULNERABILITY ------------------------- Reflected XSS Attacks XSS vulnerabilities in Webmin 1.670 II. BACKGROUND ------------------------- Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing an...
Webmin contains a cross-site scripting vulnerability
Overview Webmin 1.670, and possibly earlier versions, contains a cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Webmin 1.670, and possibly earlier versions, contains a cross-site scripting vulnerability in...
Webmin <= 1.580 Multiple Input-Validation Vulnerabilities (deprecated)
Binary data 6780.prm...
Webmin show.cgi Command Execution (CVE-2012-2982)
A command execution vulnerability has been reported in Webmin...
Webmin edit_html.cgi file Parameter Traversal Arbitrary File Access (CVE-2012-2983)
A directory traversal has been reported in Webmin...
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...