Skip to contentWebmin vulnerabilities
Newest
- webminWebmin through 1.991, when the Authentic theme is used, allows remote code execution when a user...CVE-2022-30708Fix available8.8 High
- webminA Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager...CVE-2021-32162Public exploit8.8 High
- webminA Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature.CVE-2021-32161Public exploit6.1 Medium
- webminA Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature.CVE-2021-32160Public exploit6.1 Medium
- webminA Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and...CVE-2021-32159Public exploit8.8 High
- webminA Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download...CVE-2021-32158Public exploit6.1 Medium
- webminA Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs...CVE-2021-32157Public exploit9.6 Critical
- webminA cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron...CVE-2021-32156Public exploit8.8 High
- webmin, webmin webmin/webmin +1 moreImproper Authorization in webmin/webminCVE-2022-08295.4 Medium
- webmin, webmin webmin/webmin +1 moreImproper Access Control to Remote Code Execution in webmin/webminCVE-2022-0824Public exploitEPSS 97.0%8.3 High
- webminWebmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through...CVE-2021-31762Public exploit8.8 High
- webminWebmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command...CVE-2021-31761Public exploitEPSS 33.6%9.6 Critical
- webminWebmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution...CVE-2021-31760Public exploit8.8 High
- webminminiserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the...CVE-2020-357699.8 Critical
- webminArbitrary command execution can occur in Webmin through 1.962. Any user authorized for the...CVE-2020-35606Public exploitEPSS 28.0%8.8 High
- webminXSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module ...CVE-2020-126706.1 Medium
- webminAn Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the...CVE-2020-8821EPSS 79.1%5.4 Medium
- webminAn XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands...CVE-2020-88205.4 Medium
- webminrpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object...CVE-2019-15642Public exploitEPSS 36.6%8.8 High
- webminxmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin...CVE-2019-156416.5 Medium
- webminAn issue was discovered in Webmin through 1.920. The parameter old in password_change.cgi...CVE-2019-15107In KEVPublic exploitFix availableEPSS 99.7%9.8 Critical
- webminIn Webmin through 1.910, any user authorized to the "Package Updates" module can execute...CVE-2019-12840Public exploitEPSS 77.6%8.8 High
- webminWebmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index...CVE-2018-19191EPSS 39.1%5.4 Medium
- webminWebmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file...CVE-2019-9624Public exploitEPSS 23.7%7.8 High
- webminAn issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any...CVE-2018-87129.8 Critical
- webmincustom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS...CVE-2017-170894.8 Medium
- webminWebmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager'...CVE-2017-15646Public exploit6.1 Medium
- webminCSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd=...CVE-2017-15645Public exploit8.8 High
- webminSSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET...CVE-2017-15644Public exploit8.6 High
- webminMultiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers...CVE-2017-93136.1 Medium
- webminMultiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote...CVE-2017-21066.1 Medium
- webmin userminMultiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter...CVE-2016-48976.1 Medium
- webminThe Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink...CVE-2015-13774.9 Medium
- webminCross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is...CVE-2014-38862.6 Low
- webminCross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users...CVE-2014-38854.3 Medium
- webmin userminCross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to...CVE-2014-38844.3 Medium
- webmin userminUsermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via...CVE-2014-38836.8 Medium
- webmin, webmin userwin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1...CVE-2014-39244.3 Medium
- webminCross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote...CVE-2014-03394.3 Medium
- webminCross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject...CVE-2011-19374.3 Medium
- webmin usermin, webmin +1 moreCross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows...CVE-2009-45684.3 Medium
- webmin usermin, webmin +1 moreCross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320...CVE-2008-07204.3 Medium
- webminUnspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to...CVE-2007-50669.0 High
- webmin usermin, webmin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and...CVE-2007-31564.3 Medium
- usermin, webmin +1 moreMultiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and...CVE-2007-12764.3 Medium
- usermin, webmin +1 moreWebmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00")...CVE-2006-45426.8 Medium
- usermin, webmin +1 moreWebmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding...CVE-2006-3392Public exploitEPSS 79.5%5.0 Medium
- webminDirectory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote...CVE-2006-32745.0 Medium
- webmin, debian linux +1 moreFormat string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin...CVE-2005-3912EPSS 14.5%7.5 High
- usermin, webmin +1 moreminiserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is...CVE-2005-30427.5 High
- Show moreLoading…