Description
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
References
- http://www.webmin.com/security.html
- 33832 vdb-entry
- 24321 third-party-advisory
- ADV-2007-0780 vdb-entry
- 1017711 vdb-entry
- http://www.webmin.com/changes-1.330.html
- webmin-chooser-xss(32725) vdb-entry