Webmin Usermin 2.000

CPE Details

Webmin Usermin 2.000
2.000
2023-09-27
08h07 +00:00
2023-09-27
08h07 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:webmin:usermin:2.000:*:*:*:*:*:*:*

Informations

Vendor

webmin

Product

usermin

Version

2.000

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-41157 2023-09-15 22h00 +00:00 Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab.
5.4
Moyen
CVE-2023-41159 2023-09-13 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
5.4
Moyen
CVE-2023-41152 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program.
5.4
Moyen
CVE-2023-41154 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable.
5.4
Moyen
CVE-2023-41155 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.
5.4
Moyen
CVE-2023-41158 2023-09-12 22h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.
5.4
Moyen
CVE-2023-41162 2023-09-12 22h00 +00:00 A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.
6.1
Moyen
CVE-2023-41161 2023-09-06 22h00 +00:00 Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.
5.4
Moyen