Vulnerability in Usermin

CVE-2002-0756

Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.

EPSS: 0.017 (74.5th percentile) — read the EPSS interpretation.

Affected products

  • Usermin — versions 0.7, 0.8, 0.9
  • Webmin — versions 0.91, 0.92, 0.92.1
  • N/a — versions n/a

References

  • cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
  • cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)