Usermin vulnerabilities

Products

• Usermin 15

Newest

• usermin Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code... CVE-2015-2079 9.9 CriticalApril 28, 2025
• usermin, webmin +1 more Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970... CVE-2024-36453 6.1 MediumJuly 10, 2024
• usermin, webmin +1 more Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and... CVE-2007-1276 4.3 MediumMarch 5, 2007
• usermin Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related... CVE-2006-4246 Fix available 3.6 LowSeptember 15, 2006
• usermin, webmin +1 more Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00")... CVE-2006-4542 Fix available 6.8 MediumSeptember 5, 2006
• usermin, webmin +1 more Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding... CVE-2006-3392 Public exploitFix available EPSS 79.5% 5.0 MediumJuly 6, 2006
• usermin, webmin +1 more miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is... CVE-2005-3042 7.5 HighSeptember 22, 2005
• usermin, webmin +1 more Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change... CVE-2005-1177 10.0 HighApril 19, 2005
• usermin, webmin +1 more The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute... CVE-2004-1468 7.5 HighDecember 31, 2004
• usermin, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 more The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files... CVE-2004-0559 Fix available 2.1 LowSeptember 14, 2004
• usermin Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote... CVE-2004-0588 6.8 MediumJune 23, 2004
• usermin, webmin, debian linux +2 more The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse... CVE-2004-0583 Fix available 5.0 MediumJune 23, 2004
• usermin, webmin, engardelinux guardian digital webtool +2 more miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle... CVE-2003-0101 Public exploitFix available EPSS 15.5% 10.0 HighFebruary 26, 2003
• usermin, webmin +1 more (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly... CVE-2002-0757 7.5 HighJuly 26, 2002
• usermin, webmin +1 more Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin... CVE-2002-0756 7.5 HighJuly 26, 2002