CVE-2014-3924
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows.
| Software | From | Fixed in |
|---|---|---|
| webmin / webmin | - | 1.680.x |
| webmin / userwin | - | 1.590.x |
- http://secunia.com/advisories/58917
- http://secunia.com/advisories/58919
- http://www.securityfocus.com/bid/67647
- http://www.securityfocus.com/bid/67649
- http://www.securitytracker.com/id/1030296
- http://www.securitytracker.com/id/1030297
- http://www.webmin.com/changes.html
- http://www.webmin.com/uchanges.html
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime