| Max CVSS | 6.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-2982 | 6.5 |
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
|
30-05-2013 - 03:16 | 11-09-2012 - 18:55 | |
| CVE-2012-2983 | 5.0 |
file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
|
30-05-2013 - 03:16 | 11-09-2012 - 18:55 | |
| CVE-2012-2981 | 6.0 |
Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
|
30-05-2013 - 03:16 | 11-09-2012 - 18:55 |