CVE-2007-1276 Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
MediumCVSS 4.3
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usermin | = 1.000 | No fix listed |
| usermin | = 1.010 | No fix listed |
| usermin | = 1.020 | No fix listed |
| usermin | = 1.030 | No fix listed |
| usermin | = 1.040 | No fix listed |
| usermin | = 1.051 | No fix listed |
| usermin | = 1.060 | No fix listed |
| usermin | = 1.070 | No fix listed |
| usermin | = 1.080 | No fix listed |
| usermin | = 1.090 | No fix listed |
| usermin | = 1.100 | No fix listed |
| usermin | = 1.110 | No fix listed |
| usermin | = 1.120 | No fix listed |
| usermin | = 1.130 | No fix listed |
| usermin | = 1.140 | No fix listed |
| usermin | = 1.150 | No fix listed |
| usermin | = 1.210 | No fix listed |
| usermin | = 1.220 | No fix listed |
| usermin | = 1.230 | No fix listed |
| usermin | = 1.240 | No fix listed |
| usermin | = 1.250 | No fix listed |
| webmin | = 1.0.00 | No fix listed |
| webmin | = 1.0.10 | No fix listed |
| webmin | = 1.0.20 | No fix listed |
| webmin | = 1.0.30 | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| webmin | = 1.0.40 | No fix listed |
| webmin | = 1.0.50 | No fix listed |
| webmin | = 1.0.51 | No fix listed |
| webmin | = 1.0.60 | No fix listed |
| webmin | = 1.0.70 | No fix listed |
| webmin | = 1.0.80 | No fix listed |
| webmin | = 1.0.90 | No fix listed |
| webmin | = 1.1.00 | No fix listed |
| webmin | = 1.1.10 | No fix listed |
| webmin | = 1.1.20 | No fix listed |
| webmin | = 1.1.21 | No fix listed |
| webmin | = 1.1.30 | No fix listed |
| webmin | = 1.1.40 | No fix listed |
| webmin | = 1.1.50 | No fix listed |
| webmin | = 1.2.20 | No fix listed |
| webmin | = 1.2.30 | No fix listed |
| webmin | = 1.2.40 | No fix listed |
| webmin | = 1.2.50 | No fix listed |
| webmin | = 1.3.20 | No fix listed |
References
- 33832 vdb-entry
- 24321 third-party-advisory vendor-advisory
- 1017711 vdb-entry
- ADV-2007-0780 vdb-entry vendor-advisory
- www.webmin.com
- www.webmin.com
- webmin-chooser-xss(32725) vdb-entry