CVE-2008-0720: XSS
Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi (aka the search section), and possibly other components accessed through a "search box" or "open file box." NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0720?
CVE-2008-0720 is classified as a medium severity vulnerability due to its potential impact on user security.
How do I fix CVE-2008-0720?
To fix CVE-2008-0720, upgrade to Webmin version 1.400 or later and Usermin version 1.320 or later.
What kind of attacks does CVE-2008-0720 facilitate?
CVE-2008-0720 facilitates cross-site scripting (XSS) attacks which can allow attackers to inject arbitrary web scripts.
Which versions are affected by CVE-2008-0720?
Versions 1.370 and 1.390 of Webmin and versions 1.300 and 1.320 of Usermin are affected by CVE-2008-0720.
What component is exploited in CVE-2008-0720?
CVE-2008-0720 is exploited through the search parameter in the webmin_search.cgi file.