Webmin Usermin 2.000

CPE Details

Webmin Usermin 2.000
webmin
usermin
2.000
2023-09-27
08h07 +00:00
2023-09-27
08h07 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:webmin:usermin:2.000:*:*:*:*:*:*:*

Informations

Vendor

webmin

Product

usermin

Version

2.000

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-41157 2023-09-15 22h00 +00:00 Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab.
5.4
Medium
CVE-2023-41159 2023-09-13 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
5.4
Medium
CVE-2023-41152 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program.
5.4
Medium
CVE-2023-41154 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable.
5.4
Medium
CVE-2023-41155 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.
5.4
Medium
CVE-2023-41158 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.
5.4
Medium
CVE-2023-41162 2023-09-12 22h00 +00:00 A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.
6.1
Medium
CVE-2023-41161 2023-09-06 22h00 +00:00 Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.
5.4
Medium