EDB-22275

functional

Webmin 0.9x / Usermin 0.9x/1.0 - Access Session ID Spoofing

view exploit source exploit_dbverifiedtype remoteauthor Carl Livittpublished 2003-02-20catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-0101UShigh10.0Exploit
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded string…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan