DeutschShown in its original language — a full translation is planned for a future version.
Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
view advisory published 2023-07-31
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-40983US | medium6.1 | — | ||
A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload int… | ||||
| CVE-2023-40982US | medium5.4 | — | ||
A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module n… | ||||
| CVE-2023-40986US | medium5.4 | — | ||
A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payl… | ||||
| CVE-2023-40985US | medium5.4 | — | ||
An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a malicious payload,… | ||||
| CVE-2023-40984US | medium5.4 | — | ||
A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload int… | ||||
| CVE-2023-38311US | medium5.4 | — | ||
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System Logs Viewer functionality. The vulnerability allows an attac… | ||||
| CVE-2023-38310US | medium5.4 | — | ||
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system logs functionality. The vulner… | ||||
| CVE-2023-38309US | medium6.1 | — | ||
An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the package search functionality. The vulnerability allows an attack… | ||||
| CVE-2023-38308US | medium6.1 | — | ||
An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By provid… | ||||
| CVE-2023-38307US | medium5.4 | — | ||
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an au… | ||||
| CVE-2023-38306US | medium6.1 | — | ||
An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file upload functionality. Normally, the application restricts the… | ||||
| CVE-2023-38305US | medium6.1 | — | ||
An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a crafted download path c… | ||||
| CVE-2023-38304US | medium5.4 | — | ||
An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a mal… | ||||
| CVE-2023-38303US | medium5.4 | — | ||
An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real nam… | ||||
02
references
External citations — patches, advisories, analysis.
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
- NIST Database vom 2023-07-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan