CVE-2007-3156

Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) message, or (3) question parameter. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.webmin.com/changes-1.350.html
http://www.securityfocus.com/bid/24381	Patch
http://secunia.com/advisories/25580	Patch Vendor Advisory
http://www.webmin.com/security.html
http://security.gentoo.org/glsa/glsa-200707-05.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:135
http://secunia.com/advisories/25785	Vendor Advisory
http://secunia.com/advisories/25956	Vendor Advisory
http://osvdb.org/36932
http://www.vupen.com/english/advisories/2007/2117	Vendor Advisory

Configuration 1

cpe:2.3:a:webmin:usermin:*:*:*:*:*:*:*:* cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*

---

Published : 2007-06-11 10:30

Updated : 2011-09-13 04:00

---

NVD link : CVE-2007-3156

Mitre link : CVE-2007-3156

No products.

CWE-79