CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2002-0756
https://notcve.org/view.php?id=CVE-2002-0756
26 Jul 2002 — Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies. Vulnerabilidad de secuencias de comandos en sitios cruzados en la página de autenticación de: Webmin 0.96 Usermin 0.90 que permite a atacantes remotos la inserción de código en una página de error y posiblemente el robo de cookies. • http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2001-1530
https://notcve.org/view.php?id=CVE-2001-1530
31 Dec 2001 — run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. • http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 2CVE-2001-1196 – webmin 0.91 - Directory Traversal
https://notcve.org/view.php?id=CVE-2001-1196
17 Dec 2001 — Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. Una vulnerabilidad de atravesamiento de directorios en edit_action.cgi de Webmin Directory 0.91 permite a atacantes remotos, la obtención de privilegios mediante el uso de '..' (punto punto) en el argumento. • https://www.exploit-db.com/exploits/21183 •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 1CVE-2001-1074
https://notcve.org/view.php?id=CVE-2001-1074
28 May 2001 — Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges. • http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-0222
https://notcve.org/view.php?id=CVE-2001-0222
26 Mar 2001 — webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. • http://www.calderasystems.com/support/security/advisories/CSSA-2001-004.0.txt •
CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0CVE-1999-1074
https://notcve.org/view.php?id=CVE-1999-1074
31 Dec 1999 — Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. • http://www.securityfocus.com/archive/1/9138 •