Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2007-1276
Disclosure Date: March 05, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
0
Attacker Value
Unknown
CVE-2006-4542
Disclosure Date: September 05, 2006 (last updated October 04, 2023)
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.
0
Attacker Value
Unknown
CVE-2005-1177
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact.
0
Attacker Value
Unknown
CVE-2004-1468
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
0
Attacker Value
Unknown
CVE-2004-0559
Disclosure Date: October 20, 2004 (last updated February 22, 2025)
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
0
Attacker Value
Unknown
CVE-2002-1947
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.
0
