NVD

Id
63175  
Name
CVE-2006-4542  
Description
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-05  
Modified Date
2011-03-09  
Seq
2006-4542  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329042 63175 CVE-2006-4542 JVN#99776858  View
329043 63175 CVE-2006-4542 1016776  View
329044 63175 CVE-2006-4542 1016777  View
329045 63175 CVE-2006-4542 http://webmin.com/security.html  View
329046 63175 CVE-2006-4542 DSA-1199  View
329047 63175 CVE-2006-4542 http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/89_e.html  View
329048 63175 CVE-2006-4542 MDKSA-2006:170  View
329049 63175 CVE-2006-4542 19820  View
329050 63175 CVE-2006-4542 ADV-2006-3424  View
329051 63175 CVE-2006-4542 webmin-usermin-source-disclosure(28699)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58675 JVNDB-2006-000939 Webmin および Usermin にクロスサイトスクリプティングを含む複数の脆弱性 ウェブベースのシステム管理ツールである Webmin および Usermin には、以下の脆弱性が存在します。 CVE-2006-4542 20644 CVE-2006-4542 63175 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000939.html 2006-08-31 2007-05-14 View