CVE-2002-1673
Webmin 0.92 - Stored Cross-Site Scripting via User Input in Passwd File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1673. PoCs published by prophecy.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Webmin where an attacker with write privileges to certain files (e.g., /etc/aliases, /etc/passwd) can inject malicious JavaScript. The script executes when the root user views the affected page, exfiltrating session cookies to an attacker-controlled server.
Description
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Webmin where an attacker with write privileges to certain files (e.g., /etc/aliases, /etc/passwd) can inject malicious JavaScript. The script executes when the root user views the affected page, exfiltrating session cookies to an attacker-controlled server.