EUVD-2018-9945

Malware in sbrugna...

Design/Logic Flaw

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208

CVE-2018-18208 affects Virtualmin 6.03 and enables reflected XSS via the query string, demonstrated through the webmin_search.cgi URI. The connected sources confirm the vulnerable component (Webmin/Virtualmin search endpoint) and the input vector (query string) but do not provide explicit exploit...

CVE-2018-18208

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2018-18208: Improper Neutralization of Input During Web Page Generation

Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webminsearch.cgi URI...

CVE-2008-0720: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...