Sploitus

72 exploited vulnerabilities in Webmin

Showing 51–72 of 72, highest-scoring first

Vendors
Red Os, Webmin, Usermin, Jamie Cameron
With known exploits
72
Affected Webmin versions
= 2.021, 1.990, 2.000, 2.100, 1.890, 1.2.80, 2.105, 2.002, 1.670, 1.600, 1.610, 1.620, 1.630, 1.640, 1.650, 1.660, 1.540, 0.75, 0.76, 0.77, 0.78, 0.79, 0.80, 0.81, 0.82, 0.83, 0.84, 0.85, 0.86, 0.87, 0.88, 0.91, 0.92, 0.93, 0.94, 0.950, 0.960, 0.970, 0.980, 0.990, 1.000, 1.010, 1.020, 1.030, 1.040, 1.050, 1.060, 1.070, 1.080, 1.090, 1.100, 1.110, 1.121, 1.130, 1.140, 1.150, 2.001, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.21, 0.22, 0.31, 0.41, 0.42, 0.51, 0.92.1, 2.003
Affected Webmin Usermin versions
= 2.000
Affected Gentoo Webmin versions
≀ 1.590, 1.140, 1.150, 1.160, 1.170, 1.180, 1.200, 1.210, 1.220, 1.230, 1.240, 1.260, 1.270, 1.280, 1.290, 1.300, 1.310, 1.320, 1.330, 1.340, 1.370, 1.380, 1.390, 1.400, 1.410, 1.420, 1.430, 1.440, 1.450, 1.470, 1.480, 1.500, 1.510, 1.520, 1.530, 1.550, 1.560, 1.570, 1.580
Affected Usermin versions
≀ 1.210

Vulnerabilities with exploits

Highest CVSS first β€” 6 of these already have exploit code on Sploitus

CVE-2023-38303
CVSS 5.5 MEDIUM 2023-07-31FIX AVAILABLE
CVE-2023-38304
CVSS 5.5 MEDIUM 2023-07-31FIX AVAILABLE
CVE-2023-38311
CVSS 5.5 MEDIUM 2023-07-31
CVE-2023-38310
CVSS 5.5 MEDIUM 2023-07-31
CVE-2022-0829 3 exploits
CVSS 5.5 MEDIUM 2022-02-17FIX AVAILABLE
Exploit for Improper Access Control in WebminExploit for Improper Access Control in Webmin
CVE-2023-41155
CVSS 5.4 MEDIUM 2023-09-13
CVE-2023-41152
CVSS 5.4 MEDIUM 2023-09-13FIX AVAILABLE
CVE-2023-40986
CVSS 5.4 MEDIUM 2023-09-14
CVE-2023-40985
CVSS 5.4 MEDIUM 2023-09-14FIX AVAILABLE
CVE-2023-40984
CVSS 5.4 MEDIUM 2023-09-14FIX AVAILABLE
CVE-2023-40982
CVSS 5.4 MEDIUM 2023-09-14FIX AVAILABLE
CVE-2018-19191 1 exploit
CVSS 5.4 MEDIUM 2019-03-17FIX AVAILABLE
Webmin 1.890 Cross Site Scripting
CVE-2026-42210
CVSS 5.3 MEDIUM 2026-07-20FIX AVAILABLE
CVE-2012-2983 3 exploits
CVSS 5.0 MEDIUM 2012-09-11FIX AVAILABLE
Webmin 1.580 Directory TraversalWebmin Edit_html.cgi File Parameter Traversal Arbitrary File Access
CVE-2006-3392 7 exploits
CVSS 5.0 MEDIUM 2006-07-06FIX AVAILABLE
Webmin File DisclosureSn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
CVE-2023-52046
CVSS 4.8 MEDIUM 2024-01-25
CVE-2023-43309
CVSS 4.8 MEDIUM 2023-09-21
CVE-2014-0339 1 exploit
CVSS 4.3 MEDIUM 2014-03-16FIX AVAILABLE
Webmin 'view.cgi'θ·¨η«™θ„šζœ¬ζΌζ΄ž
CVE-2011-1937
CVSS 4.3 MEDIUM 2011-05-31FIX AVAILABLE
CVE-2022-3844
CVSS 4.0 MEDIUM 2022-11-02FIX AVAILABLE
CVE-2002-1673 1 exploit
CVSS 3.6 LOW 2002-12-31FIX AVAILABLE
Webmin 0.x - Code Input Validation
CVE-2024-36452
CVSS 3.1 LOW 2024-07-09FIX AVAILABLE