Virtualmin: >> Virtualmin >> 6.03 Security Vulnerabilities
Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-09-04
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-10-10
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-10-10