webmin Vulnerability Advisory Catalog

Total 98 security vulnerabilities recorded for webmin software and firmware.

← Back to All Vendors
Component: webmin

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status modul...

📅 2026-05-21
CVSS 5.4 Dossier →
Component: webmin

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is construct...

📅 2025-10-16
CVSS 7.1 Dossier →
CVE-2015-2079 CRITICAL
Component: usermin

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argumen...

📅 2025-04-28
CVSS 9.9 Dossier →
Component: webmin

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins...

📅 2024-12-30
CVSS 8.8 Dossier →
Component: usermin

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts....

📅 2024-10-16
CVSS 5.3 Dossier →
Component: usermin

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerab...

📅 2024-07-10
CVSS 6.1 Dossier →
Component: webmin

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended o...

📅 2024-07-10
CVSS 3.1 Dossier →
Component: webmin

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is...

📅 2024-07-10
CVSS 8.8 Dossier →
Component: webmin

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script ma...

📅 2024-07-10
CVSS 5.4 Dossier →
Component: webmin

Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payload to the...

📅 2024-01-25
CVSS 4.8 Dossier →
Component: webmin

There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers ...

📅 2023-09-21
CVSS 4.8 Dossier →
Component: usermin

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the fold...

📅 2023-09-16
CVSS 5.4 Dossier →
Component: webmin

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via i...

📅 2023-09-15
CVSS 6.1 Dossier →
Component: webmin

A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inj...

📅 2023-09-15
CVSS 5.4 Dossier →
Component: webmin

A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sri...

📅 2023-09-15
CVSS 5.4 Dossier →
Component: webmin

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By p...

📅 2023-09-15
CVSS 5.4 Dossier →
Component: webmin

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via i...

📅 2023-09-15
CVSS 5.4 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script...

📅 2023-09-14
CVSS 5.4 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary w...

📅 2023-09-14
CVSS 5.4 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web ...

📅 2023-09-14
CVSS 5.4 Dossier →
Component: usermin

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script o...

📅 2023-09-13
CVSS 6.1 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scrip...

📅 2023-09-13
CVSS 5.4 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject...

📅 2023-09-13
CVSS 5.4 Dossier →
Component: usermin

A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web scri...

📅 2023-09-13
CVSS 5.4 Dossier →
Page 1 of 5 (98 Total Records)