CVE-2014-3886
20.07.2014, 11:12
Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
| Vendor | Product | Version |
|---|---|---|
| webmin | webmin | 𝑥 ≤ 1.680 |
| webmin | webmin | 1.600 |
| webmin | webmin | 1.610 |
| webmin | webmin | 1.620 |
| webmin | webmin | 1.630 |
| webmin | webmin | 1.640 |
| webmin | webmin | 1.650 |
| webmin | webmin | 1.660 |
| webmin | webmin | 1.670 |
𝑥
= Vulnerable software versions