PT-2018-4352 · Webmin · Webmin

Published 2015-09-08 · Updated 2015-09-08 · CVE-2015-1990

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Webmin (affected versions not specified)

Description A security issue exists where a malicious website could create links or Javascript referencing the xmlrpc.cgi script. This could be triggered when a user logged into Webmin visits the attacking site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2015-1990

MGASA-2015-0344

Affected Products

Webmin

References · 5

• https://osv.dev/vulnerability/MGASA-2015-0344 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0344.html · Security Note
• http://webmin.com/security.html · Note
• http://webmin.com/changes.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=16168 · Note