Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
BID:67647
Info
Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 67647 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3885 |
| Remote: | Yes |
| Local: | No |
| Published: | May 20 2014 12:00AM |
| Updated: | Jun 23 2014 12:03AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Webmin Webmin 1.290 Webmin Webmin 1.280 Webmin Webmin 1.270 Webmin Webmin 1.260 Webmin Webmin 1.250 Webmin Webmin 1.240 Webmin Webmin 1.230 Webmin Webmin 1.220 Webmin Webmin 1.210 Webmin Webmin 1.200 Webmin Webmin 1.190 Webmin Webmin 1.180 Webmin Webmin 1.170 Webmin Webmin 1.160 Webmin Webmin 1.150 Webmin Webmin 1.140 Webmin Webmin 1.130 Webmin Webmin 1.121 Webmin Webmin 1.110 Webmin Webmin 1.100 Webmin Webmin 1.0 90 Webmin Webmin 1.0 80 Webmin Webmin 1.0 70 Webmin Webmin 1.0 60 Webmin Webmin 1.0 50 Webmin Webmin 1.0 20 Webmin Webmin 1.0 00 Webmin Webmin 1.550 Webmin Webmin 1.540 Webmin Webmin 1.500 Webmin Webmin 1.430 Webmin Webmin 1.390 Webmin Webmin 1.370 Webmin Webmin 1.350 Webmin Webmin 1.340 Webmin Webmin 1.330 Webmin Webmin 1.320 Webmin Webmin 1.296 |
| Not Vulnerable: | |
Discussion
Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
Webmin is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Webmin prior to 1.690 are vulnerable.
Webmin is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Webmin prior to 1.690 are vulnerable.
Exploit / POC
Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting user to visit a specially crafted URL.
An attacker can exploit these issues by enticing an unsuspecting user to visit a specially crafted URL.
Solution / Fix
Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Webmin Multiple Unspecified Cross Site Scripting Vulnerabilities
References:
References:
- Webmin Change Log (Webmin)
- Webmin Homepage (Webmin)