Webmin : Security Vulnerabilities, CVEs, Published In 2014
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
Max CVSS
4.3
EPSS Score
0.29%
Published
2014-05-30
Updated
2014-07-17
Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
Max CVSS
2.6
EPSS Score
0.14%
Published
2014-07-20
Updated
2014-07-22
Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
Max CVSS
4.3
EPSS Score
0.14%
Published
2014-07-20
Updated
2014-07-22
Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
Max CVSS
4.3
EPSS Score
0.14%
Published
2014-07-20
Updated
2014-07-22
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
Max CVSS
6.8
EPSS Score
0.59%
Published
2014-06-21
Updated
2014-06-23
Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Max CVSS
4.3
EPSS Score
0.34%
Published
2014-03-16
Updated
2015-07-24
6 vulnerabilities found