Lucene search
RedhatCVELIST:CVE-2011-1937HistoryMay 31, 2011 - 8:00 p.m.
CVE-2011-1937
2011-05-3120:00:00
redhat
www.cve.org
8
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
References
javierb.com.ar/2011/04/24/xss-webmin-1-540/
openwall.com/lists/oss-security/2011/05/22/1
openwall.com/lists/oss-security/2011/05/24/7
securityreason.com/securityalert/8264
securitytracker.com/id?1025438
www.mandriva.com/security/advisories?name=MDVSA-2011:109
www.securityfocus.com/archive/1/517658
www.securityfocus.com/bid/47558
www.youtube.com/watch?v=CUO7JLIGUf0
github.com/webmin/webmin/commit/46e3d3ad195dcdc1af1795c96b6e0dc778fb6881
Related
openvas
openvas
Mandriva Update for webmin MDVSA-2011:109 (webmin)
2011-06-20 00:00:00
Mandriva Update for webmin MDVSA-2011:109 (webmin)
2011-06-20 00:00:00
Webmin Cross-Site Scripting Vulnerability-02 (Mar 2018) - Linux
2018-03-29 00:00:00
cve
cve
CVE-2011-1937
2011-05-31 20:55:05
nessus
nessus
Webmin <= 1.540 Cross Site Scripting
2018-03-22 00:00:00
Mandriva Linux Security Advisory : webmin (MDVSA-2011:109)
2011-06-14 00:00:00
nvd
nvd
CVE-2011-1937
2011-05-31 20:55:05
prion
prion
Cross site scripting
2011-05-31 20:55:00
securityvulns
securityvulns