NVD

Id
8809  
Name
CVE-2011-1937  
Description
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-05-31  
Modified Date
2011-09-21  
Seq
2011-1937  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50776 8809 CVE-2011-1937 http://javierb.com.ar/2011/04/24/xss-webmin-1-540/  View
50777 8809 CVE-2011-1937 [oss-security] 20110522 CVE Request: Webmin Local Privilege Escalation Vulnerability  View
50778 8809 CVE-2011-1937 [oss-security] 20110524 Re: CVE Request: Webmin Local Privilege Escalation Vulnerability  View
50779 8809 CVE-2011-1937 8264  View
50780 8809 CVE-2011-1937 1025438  View
50781 8809 CVE-2011-1937 MDVSA-2011:109  View
50782 8809 CVE-2011-1937 20110424 XSS in Webmin 1.540 + exploit for privilege escalation  View
50783 8809 CVE-2011-1937 47558  View
50784 8809 CVE-2011-1937 http://www.youtube.com/watch?v=CUO7JLIGUf0  View
50785 8809 CVE-2011-1937 https://github.com/webmin/webmin/commit/46e3d3ad195dcdc1af1795c96b6e0dc778fb6881  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34359 JVNDB-2011-004601 Webmin におけるクロスサイトスクリプティングの脆弱性 Webmin は、useradmin/index.cgi and useradmin/user-lib.pl に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1937 49844 CVE-2011-1937 8809 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004601.html 2011-05-31 2012-06-27 View