← Back

Usermin

usermin

Vendor: Webmin • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2079
1Webmin
1Usermin
May 14, 2025
Apr 28, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.
CVE-2024-44762
1Webmin
1Usermin
Oct 15, 2025
Oct 16, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
CVE-2024-36453
1Webmin
2Usermin
Webmin
Oct 8, 2025
Jul 10, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web bro...Show more
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.Show less
CVE-2023-41157
1Webmin
1Usermin
Nov 21, 2024
Sep 16, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab,...Show more
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab.Show less
CVE-2023-41160
1Webmin
1Usermin
Nov 21, 2024
Sep 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key.
CVE-2023-41159
1Webmin
1Usermin
Nov 21, 2024
Sep 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.
CVE-2023-41156
1Webmin
1Usermin
Nov 21, 2024
Sep 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter.Show less
CVE-2023-41162
1Webmin
1Usermin
Nov 21, 2024
Sep 13, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop do...Show more
A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.Show less
CVE-2023-41158
1Webmin
1Usermin
Nov 21, 2024
Sep 13, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type pro...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.Show less
CVE-2023-41155
1Webmin
2Usermin
Webmin
Nov 21, 2024
Sep 13, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.Show less
CVE-2023-41154
1Webmin
1Usermin
Nov 21, 2024
Sep 13, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environm...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable.Show less
CVE-2023-41152
1Webmin
1Usermin
Nov 21, 2024
Sep 13, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program.Show less
CVE-2023-41161
1Webmin
1Usermin
Nov 21, 2024
Sep 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sig...Show more
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.Show less
CVE-2023-41153
1Webmin
1Usermin
Nov 21, 2024
Aug 29, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the host value while editing the host options...Show more
A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the host value while editing the host options.Show less
CVE-2022-35132
1Webmin
1Usermin
May 7, 2025
Oct 25, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module.
CVE-2022-36880
1Webmin
2Usermin
Webmin
Nov 21, 2024
Jul 27, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message.
CVE-2016-4897
1Webmin
1Usermin
May 13, 2026
Apr 12, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690.
CVE-2014-3884
1Webmin
1Usermin
May 6, 2026
Jul 20, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
CVE-2014-3883
1Webmin
1Usermin
May 6, 2026
Jun 21, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
CVE-2009-4568
1Webmin
2Usermin
Webmin
Apr 23, 2026
Jan 5, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.