Approved changes feed: RSS · Atom

cpe:2.3:a:webmin:webmin:0.970:*:*:*:*:*:*:*

part: a version: 0.970 update: *

VendorWebmin (6926d512-2a2b-58cc-b911-39912c60be84)
ProductWebmin (3224cdf7-4b87-5464-81af-0361faa7f4bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/webmin/webmin purl2cpe 2026-06-01 10:16:23.608020
pkg:sourceforge/webadmin purl2cpe 2026-06-01 10:16:23.608021

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1937 vulnerable 2026-06-08 04:58:03.112445 Details available
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
Published: 2011-05-31T20:00:00.000Z
Updated: 2024-08-06T22:46:00.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4568 vulnerable 2026-06-08 04:51:48.982779 Details available
Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-01-05T18:31:00.000Z
Updated: 2024-08-07T07:08:38.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2360 vulnerable 2026-06-08 04:47:19.793919 Details available
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
Published: 2007-10-29T19:00:00.000Z
Updated: 2024-09-17T02:21:10.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.