low3.6Public exploit code
CVE-2002-1673
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Webmin 0.x - Code Input Validation2002-03-20 · local · linux · Verified
Impact
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmin | Webmin | Versions 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/263181
- http://www.securityfocus.com/bid/4329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8596
- http://online.securityfocus.com/archive/1/263181
- http://www.securityfocus.com/bid/4329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8596