Approved changes feed: RSS · Atom

cpe:2.3:a:webmin:usermin:2.000:*:*:*:*:*:*:*

part: a version: 2.000 update: *

VendorWebmin (6926d512-2a2b-58cc-b911-39912c60be84)
ProductUsermin (48ef4f0e-0f30-5c3b-96e6-5f984701815b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/webmin/usermin purl2cpe 2026-06-01 10:16:23.572354
pkg:sourceforge/webadmin purl2cpe 2026-06-01 10:16:23.572355

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41162 vulnerable 2026-06-08 06:11:05.448970 Details available
A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.
Published: 2023-09-13T00:00:00.000Z
Updated: 2024-09-25T20:34:26.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41161 vulnerable 2026-06-08 06:11:05.448387 Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.
Published: 2023-09-07T00:00:00.000Z
Updated: 2024-09-26T19:03:09.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41159 vulnerable 2026-06-08 06:11:05.447478 Details available
A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
Published: 2023-09-14T00:00:00.000Z
Updated: 2024-09-25T19:30:29.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41158 vulnerable 2026-06-08 06:11:05.447043 Details available
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.
Published: 2023-09-13T00:00:00.000Z
Updated: 2024-09-25T20:36:19.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41157 vulnerable 2026-06-08 06:11:05.446609 Details available
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab.
Published: 2023-09-16T00:00:00.000Z
Updated: 2024-09-25T18:47:25.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41155 vulnerable 2026-06-08 06:11:05.443984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41154 vulnerable 2026-06-08 06:11:05.443597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41152 vulnerable 2026-06-08 06:11:05.441435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.