Description
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
References (7)
Core 7
Core References
Various Sources x_refsource_confirm
http://www.webmin.com/security.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/33832
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24321
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0780
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1017711
Various Sources x_refsource_confirm
http://www.webmin.com/changes-1.330.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32725
Scores
EPSS
0.0062
EPSS Percentile
45.4%
Details
CWE
CWE-352
Status
published
Products (44)
usermin/usermin
1.000
usermin/usermin
1.010
usermin/usermin
1.020
usermin/usermin
1.030
usermin/usermin
1.040
usermin/usermin
1.051
usermin/usermin
1.060
usermin/usermin
1.070
usermin/usermin
1.080
usermin/usermin
1.090
... and 34 more
Published
Mar 05, 2007
Tracked Since
Feb 18, 2026