CVE-2002-0756 Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usermin | = 0.7 | No fix listed |
| usermin | = 0.8 | No fix listed |
| usermin | = 0.9 | No fix listed |
| webmin | = 0.91 | No fix listed |
| webmin | = 0.92 | No fix listed |
| webmin | = 0.92.1 | No fix listed |
| webmin | = 0.93 | No fix listed |
| webmin | = 0.94 | No fix listed |
| webmin | = 0.95 | No fix listed |
| webmin | = 0.96 | No fix listed |
References
- 20020508 [SNS Advisory No.52] Webmin/Usermin Cross-site Scripting Vulnerability mailing-list patch vendor-advisory
- webmin-usermin-authpage-css(9036) patch vdb-entry vendor-advisory
- 4694 patch vdb-entry vendor-advisory