Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

webmin: cross-site scripting

Package(s):

webmin

CVE #(s):

CVE-2007-3156

Created:

June 25, 2007

Updated:

July 6, 2007

Description:

Multiple cross-site scripting (XSS) vulnerabilities were discovered in pam_login.cgi in webmin prior to version 1.350, which could allow a remote attacker to inject arbitrary web script or HTML.

Alerts:

Gentoo	200707-05	2007-07-05
Mandriva	MDKSA-2007:135	2007-06-23

(Log in to post comments)