Webmin 2.100
Approved changes feed: RSS · Atom
cpe:2.3:a:webmin:webmin:2.100:*:*:*:*:*:*:*
part: a version: 2.100 update: *
| Vendor | Webmin (6926d512-2a2b-58cc-b911-39912c60be84) |
|---|---|
| Product | Webmin (3224cdf7-4b87-5464-81af-0361faa7f4bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/webmin/webmin |
purl2cpe | 2026-06-01 10:16:23.671334 |
pkg:sourceforge/webadmin |
purl2cpe | 2026-06-01 10:16:23.671336 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40986 |
vulnerable | 2026-06-08 06:11:04.791692 |
Details available
A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitrary web sripts or HTML via a crafted payload injected into the Custom field.
Published: 2023-09-15T00:00:00.000Z
Updated: 2026-07-09T00:28:02.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40985 |
vulnerable | 2026-06-08 06:11:04.791351 |
Details available
An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file is searched/replaced.
Published: 2023-09-15T00:00:00.000Z
Updated: 2026-07-09T00:28:01.596Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40984 |
vulnerable | 2026-06-08 06:11:04.790758 |
Details available
A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file.
Published: 2023-09-15T00:00:00.000Z
Updated: 2026-07-09T00:28:00.374Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40983 |
vulnerable | 2026-06-08 06:11:04.790068 |
Details available
A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file.
Published: 2023-09-15T00:00:00.000Z
Updated: 2026-07-09T00:27:59.134Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40982 |
vulnerable | 2026-06-08 06:11:04.789336 |
Details available
A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cloned module name parameter.
Published: 2023-09-15T00:00:00.000Z
Updated: 2026-07-09T00:27:57.902Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.