CVE-2002-1673

high

Description

The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/8596

http://online.securityfocus.com/archive/1/263181

Details

Source: Mitre, NVD

Published: 2002-12-31

Updated: 2017-07-11

Risk Information

CVSS v2

Base Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N

Severity: Low

CVSS v3

Base Score: 7.1

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Severity: High