3 matches found
CVE-2018-19191
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
5.4CVSS5.3AI score0.39067EPSS
SaveExploits2References2
Code injection
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
3.5CVSS5.2AI score0.39067EPSS
SaveExploits2References2Affected Software1
CVE-2018-19191
Vulnerability (CVE-2018-19191): Webmin 1.890 is vulnerable to a cross-site scripting (XSS) flaw. The flaw allows an unauthenticated, remote attacker to trigger arbitrary script execution in a user’s browser by getting a user to click a specially crafted URL. Affected parameters include /config.cg...
5.4CVSS5.2AI score0.39067EPSS
SaveIn wildExploits2References2Affected Software1
20