Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) message, or (3) question parameter. NOTE: some of these details are obtained from third party information.

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.350. It is, therefore, affected by a number of cross site scripting vulnerabilities in pam_login.cgi

The remote host is affected by the vulnerability described in GLSA-200707-05 (Webmin, Usermin: XSS vulnerabilities)

    The pam_login.cgi file does not properly sanitize user input before     sending it back as output to the user.
  Impact :

    An unauthenticated attacker could entice a user to browse a specially     crafted URL, allowing for the execution of script code in the context     of the user's browser and for the theft of browser credentials. This     may permit the attacker to login to Webmin or Usermin with the user's     permissions.
  Workaround :

    There is no known workaround at this time.

Multiple cross-site scripting (XSS) vulnerabilities were discovered in pam_login.cgi in webmin prior to version 1.350, which could allow a remote attacker to inject arbitrary web script or HTML.

Updated packages have been patched to prevent this issue.

Secunia reports :

Input passed to unspecified parameters in pam_login.cgi is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

ID	Name	Product	Family	Severity
108551	Webmin < 1.350 pam_login.cgi Cross Site Scripting	Nessus	CGI abuses : XSS	medium
25680	GLSA-200707-05 : Webmin, Usermin: XSS vulnerabilities	Nessus	Gentoo Local Security Checks	medium
25601	Mandrake Linux Security Advisory : webmin (MDKSA-2007:135)	Nessus	Mandriva Local Security Checks	medium
25472	FreeBSD : webmin -- XSS vulnerability (12b7286f-16a2-11dc-b803-0016179b2dd5)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2007-3156

medium

Tenable Plugins

medium

medium

medium

medium