Vulnerabilities (CVE)

Filtered by vendor Webmin Subscribe
Filtered by product Usermin
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-0720 1 Webmin 2 Usermin, Webmin 2026-06-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.
CVE-2007-3156 1 Webmin 2 Usermin, Webmin 2026-06-16 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) message, or (3) question parameter. NOTE: some of these details are obtained from third party information.