CVE-2014-3924

MEDIO 4.3CVE-2014-3924 · Published 30/05/2014 · updated 17/06/2026

In breve

CVE-2014-3924 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda userwin (webmin), webmin (webmin).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 71.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
userwin webmin	`≤ 1.590`	No fix yet
webmin webmin	`≤ 1.680`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.

References

secunia.com/advisories/58917
secunia.com/advisories/58919
securityfocus.com/bid/67647
securityfocus.com/bid/67649
securitytracker.com/id/1030296
securitytracker.com/id/1030297
webmin.com/changes.html · Vendor Advisory
webmin.com/uchanges.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free