Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gentoo webmin 1.160 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-0427
The ebuild of Webmin prior to 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote malicious users to obtain and possibly crack the encrypted password.
Gentoo Webmin 1.150Gentoo Webmin 1.160Gentoo Webmin 1.140Gentoo Webmin 1.170
NA
CVE-2012-2981
Webmin 1.590 and previous versions allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
Gentoo Webmin 1.570Gentoo Webmin 1.550Gentoo Webmin 1.450Gentoo Webmin 1.440Gentoo Webmin 1.370Gentoo Webmin 1.340Gentoo Webmin 1.270Gentoo Webmin 1.560Gentoo Webmin 1.530Gentoo Webmin 1.430Gentoo Webmin 1.420Gentoo Webmin 1.330Gentoo Webmin 1.320Gentoo Webmin 1.240Gentoo Webmin 1.230Gentoo Webmin 1.140Gentoo Webmin 1.520Gentoo Webmin 1.510Gentoo Webmin 1.410Gentoo Webmin 1.400Gentoo Webmin 1.310Gentoo Webmin 1.300
NA
CVE-2012-2983
file/edit_html.cgi in Webmin 1.590 and previous versions does not perform an authorization check before showing a file's unedited contents, which allows remote malicious users to read arbitrary files via the file field.
Gentoo WebminGentoo Webmin 1.580Gentoo Webmin 1.500Gentoo Webmin 1.480Gentoo Webmin 1.400Gentoo Webmin 1.390Gentoo Webmin 1.290Gentoo Webmin 1.280Gentoo Webmin 1.200Gentoo Webmin 1.570Gentoo Webmin 1.550Gentoo Webmin 1.470Gentoo Webmin 1.450Gentoo Webmin 1.380Gentoo Webmin 1.370Gentoo Webmin 1.270Gentoo Webmin 1.260Gentoo Webmin 1.170Gentoo Webmin 1.160Gentoo Webmin 1.180Gentoo Webmin 1.520Gentoo Webmin 1.510
NA
CVE-2012-2982
file/show.cgi in Webmin 1.590 and previous versions allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Gentoo Webmin 1.520Gentoo Webmin 1.510Gentoo Webmin 1.420Gentoo Webmin 1.410Gentoo Webmin 1.400Gentoo Webmin 1.310Gentoo Webmin 1.300Gentoo Webmin 1.220Gentoo Webmin 1.210Gentoo WebminGentoo Webmin 1.580Gentoo Webmin 1.500Gentoo Webmin 1.480Gentoo Webmin 1.390Gentoo Webmin 1.380Gentoo Webmin 1.290Gentoo Webmin 1.280Gentoo Webmin 1.200Gentoo Webmin 1.180Gentoo Webmin 1.560Gentoo Webmin 1.530Gentoo Webmin 1.440
NA
CVE-2012-4893
Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and previous versions allow remote malicious users to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a di...
Gentoo Webmin 1.500Gentoo Webmin 1.480Gentoo Webmin 1.470Gentoo Webmin 1.450Gentoo Webmin 1.290Gentoo Webmin 1.280Gentoo Webmin 1.270Gentoo Webmin 1.260Gentoo Webmin 1.560Gentoo Webmin 1.520Gentoo Webmin 1.430Gentoo Webmin 1.410Gentoo Webmin 1.320Gentoo Webmin 1.300Gentoo Webmin 1.240Gentoo Webmin 1.220Gentoo Webmin 1.140Gentoo WebminGentoo Webmin 1.580Gentoo Webmin 1.570Gentoo Webmin 1.550Gentoo Webmin 1.390
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook