Skip to content
Noroxi

Usermin records

13 published records for vendor usermin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 7.7%
Pre-auth RCE
1
With a fix record
46.2%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2003-0101
      45Plan

      miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage

      CriticalCVSS 10.0Proof of conceptEPSS 15%

      usermin · userminMar 3, 2003

    • CVE-2006-3392
      43Plan

      Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read ar

      MediumCVSS 5.0WeaponizedEPSS 78%

      usermin · userminJul 6, 2006

    • CVE-2005-1177
      41Plan

      Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, w

      CriticalCVSS 10.0No exploitEPSS 2%

      usermin · userminMay 2, 2005

    • CVE-2005-3042
      31Monitor

      miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass aut

      HighCVSS 7.5No exploitEPSS 4%

      usermin · userminSep 22, 2005

    • CVE-2004-1468
      31Monitor

      The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in a

      HighCVSS 7.5No exploitEPSS 4%

      usermin · userminDec 31, 2004

    • CVE-2002-0757
      31Monitor

      (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and g

      HighCVSS 7.5No exploitEPSS 2%

      usermin · userminAug 12, 2002

    • CVE-2002-0756
      31Monitor

      Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert scr

      HighCVSS 7.5No exploitEPSS 2%

      usermin · userminAug 12, 2002

    • CVE-2006-4542
      28Monitor

      Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to co

      MediumCVSS 6.8No exploitEPSS 3%

      usermin · userminSep 5, 2006

    • CVE-2004-0588
      27Monitor

      Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and scrip

      MediumCVSS 6.8No exploitEPSS 1%

      usermin · userminAug 6, 2004

    • CVE-2004-0583
      21Monitor

      The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote at

      MediumCVSS 5.0No exploitEPSS 2%

      usermin · userminAug 6, 2004

    • CVE-2007-1276
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to

      MediumCVSS 4.3No exploitEPSS 1%

      usermin · userminMar 5, 2007

    • CVE-2006-4246
      14Monitor

      Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an

      LowCVSS 3.6No exploitEPSS 1%

      usermin · userminSep 19, 2006

    • CVE-2004-0559
      8Monitor

      The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on th

      LowCVSS 2.1No exploitEPSS 0%

      usermin · userminOct 20, 2004