3.6low
CVE-2002-16731 exploit
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
3.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
1
Exploit-DB
Summary
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
Exploit prediction (EPSS)
0.79% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.
Exploits and detections
- EDB-21348 Webmin 0.x - Code Input Validation · local · 2002-03-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 3.6 | AV:L/AC:L/Au:N/C:P/I:P/A:N |
References
- securityfocus.com /bid/4329 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/8596 · vdb-entry, x_refsource_XF, x_transferred
- online.securityfocus.com /archive/1/263181 · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2002-1673
- NVD: CVE-2002-1673
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.