Back to Database
Status published
Medium
CVE-2007-1276
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1276
Credits & Attribution
No credits recorded in the NVD database.
References
More from usermin
View All →CVE-2006-4542
Webmin before 1.296 and Usermin before 1.226 do not properly...
Medium
6.8
CVE-2006-4246
Usermin before 1.220 (20060629) allows remote attackers to read arbitrary...
Low
3.6
CVE-2006-3392
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path...
Medium
5
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when...
High
7.5
CVE-2005-1177
Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200...
Critical
10
Affected Vendor
usermin
View all reports →Affected Software
usermin, webmin
Vulnerable Versions:
1.000, 1.010, 1.020, 1.030, 1.040, 1.051, 1.060, 1.070, 1.080, 1.090, 1.100, 1.110, 1.120, 1.130, 1.140, 1.150, 1.210, 1.220, 1.230, 1.240, 1.250, 1.0.00, 1.0.10, 1.0.20, 1.0.30, 1.0.40, 1.0.50, 1.0.51, 1.0.60, 1.0.70, 1.0.80, 1.0.90, 1.1.00, 1.1.10, 1.1.20, 1.1.21, 1.1.30, 1.1.40, 1.1.50, 1.2.20, 1.2.30, 1.2.40, 1.2.50, 1.3.20
Timeline
Official Publish:
March 5th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.