Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-4542
HistorySep 05, 2006 - 11:04 p.m.

CVE-2006-4542

2006-09-0523:04:00
CWE-79
[email protected]
web.nvd.nist.gov
32
cve-2006-4542
webmin
usermin
xss
cgi
url
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.1%

JSON

Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null (“%00”) character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.

Affected configurations

NVD
Node
userminuserminRange≤1.220
OR
userminuserminMatch0.4
OR
userminuserminMatch0.5
OR
userminuserminMatch0.6
OR
userminuserminMatch0.7
OR
userminuserminMatch0.8
OR
userminuserminMatch0.9
OR
userminuserminMatch0.91
OR
userminuserminMatch0.92
OR
userminuserminMatch0.93
OR
userminuserminMatch0.94
OR
userminuserminMatch0.95
OR
userminuserminMatch0.96
OR
userminuserminMatch0.97
OR
userminuserminMatch0.98
OR
userminuserminMatch0.99
OR
userminuserminMatch1.000
OR
userminuserminMatch1.010
OR
userminuserminMatch1.020
OR
userminuserminMatch1.030
OR
userminuserminMatch1.040
OR
userminuserminMatch1.051
OR
userminuserminMatch1.060
OR
userminuserminMatch1.070
OR
userminuserminMatch1.080
OR
userminuserminMatch1.090
OR
userminuserminMatch1.100
OR
userminuserminMatch1.110
OR
userminuserminMatch1.120
OR
userminuserminMatch1.130
OR
userminuserminMatch1.140
OR
userminuserminMatch1.150
OR
userminuserminMatch1.210
OR
webminwebminRange≤1.2.90
OR
webminwebminMatch0.1
OR
webminwebminMatch0.2
OR
webminwebminMatch0.3
OR
webminwebminMatch0.4
OR
webminwebminMatch0.5
OR
webminwebminMatch0.6
OR
webminwebminMatch0.7
OR
webminwebminMatch0.21
OR
webminwebminMatch0.22
OR
webminwebminMatch0.31
OR
webminwebminMatch0.41
OR
webminwebminMatch0.42
OR
webminwebminMatch0.51
OR
webminwebminMatch0.76
OR
webminwebminMatch0.77
OR
webminwebminMatch0.78
OR
webminwebminMatch0.79
OR
webminwebminMatch0.80
OR
webminwebminMatch0.83
OR
webminwebminMatch0.84
OR
webminwebminMatch0.85
OR
webminwebminMatch0.88
OR
webminwebminMatch0.90
OR
webminwebminMatch0.91
OR
webminwebminMatch0.92
OR
webminwebminMatch0.92.1
OR
webminwebminMatch0.93
OR
webminwebminMatch0.94
OR
webminwebminMatch0.95
OR
webminwebminMatch0.96
OR
webminwebminMatch0.97
OR
webminwebminMatch0.98
OR
webminwebminMatch0.99
OR
webminwebminMatch1.0.00
OR
webminwebminMatch1.0.10
OR
webminwebminMatch1.0.20
OR
webminwebminMatch1.0.30
OR
webminwebminMatch1.0.40
OR
webminwebminMatch1.0.50
OR
webminwebminMatch1.0.51
OR
webminwebminMatch1.0.60
OR
webminwebminMatch1.0.70
OR
webminwebminMatch1.0.80
OR
webminwebminMatch1.0.90
OR
webminwebminMatch1.1.00
OR
webminwebminMatch1.1.10
OR
webminwebminMatch1.1.20
OR
webminwebminMatch1.1.21
OR
webminwebminMatch1.1.30
OR
webminwebminMatch1.1.40
OR
webminwebminMatch1.1.50
OR
webminwebminMatch1.2.20
OR
webminwebminMatch1.2.30
OR
webminwebminMatch1.2.40
OR
webminwebminMatch1.2.50
OR
webminwebminMatch1.2.60
OR
webminwebminMatch1.2.70
OR
webminwebminMatch1.2.80

Related

nessus 4
cvelist 1
nvd 1
ubuntucve 1
openvas 2
debian 2
osv 1
nessus
nessus
Mandrake Linux Security Advisory : webmin (MDKSA-2006:170-1)
2007-02-18 00:00:00
Webmin Null Byte Filtering Information Disclosure
2006-09-02 00:00:00
Usermin Null Byte Filtering Information Disclosure
2014-09-16 00:00:00
cvelist
cvelist
CVE-2006-4542
2006-09-05 23:00:00
nvd
nvd
CVE-2006-4542
2006-09-05 23:04:00
ubuntucve
ubuntucve
CVE-2006-4542
2006-09-05 00:00:00
openvas
openvas
Debian Security Advisory DSA 1199-1 (webmin)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1199-1)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems
2006-10-24 01:10:44
[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems
2006-10-24 01:10:44
osv
osv
webmin
2006-10-23 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.1%

JSON
Related for CVE-2006-4542
nessus4cvelist1nvd1ubuntucve1openvas2debian2osv1