CVE-2015-2011

The CVE-2015-2011 entry concerns IBM QRadar SIEM where the xmlrpc.cgi Webmin script allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors. Affected products/versions include IBM QRadar SIEM 7.2.x and 7.1 MR2 with patches: 7.2.5 Patch 4 and 7....

CVE-2015-2011

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

CVE-2015-2011: Improper Neutralization of Special Elements used in a Command

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

PT-2015-5544

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 MR2 before Patch 11 IF02 IBM QRadar SIEM versions 7.2.x before 7.2.5 Patch 4 Description The issue allows remote authenticated users to execute arbitrary commands with root privileges. This is due to a problem in t...

Updated webmin packages fix CVE-2015-1990

Updated webmin package fixes security vulnerability: A malicious website could create links or Javascript referencing the xmlrpc.cgi script, triggered when a user logged into Webmin visits the attacking site CVE-2015-1990...

PT-2018-4352

Name of the Vulnerable Software and Affected Versions Webmin affected versions not specified Description A security issue exists where a malicious website could create links or Javascript referencing the xmlrpc.cgi script. This could be triggered when a user logged into Webmin visits the attackin...

CVE-2012-0453

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...

CVE-2012-0453: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...