Description
Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
References
- http://www.webmin.com/changes.html
- 20140315 Reflected XSS Attacks XSS vulnerabilities in Webmin 1.670 (CVE-2014-0339) mailing-list
- VU#381692 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21679713
- 66248 vdb-entry