Detections
Analytics
Usermin < 1.600 Multiple Vulnerabilities
medium Nessus Plugin ID 77706
Language:
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
According to its self-reported version number, the Usermin install hosted on the remote web server is prior to 1.600. It is, therefore, affected by the following vulnerabilities :- An unspecified remote command execution vulnerability.
(CVE-2014-3883)
- Multiple cross-site scripting (XSS) vulnerabilities.
(CVE-2014-3924).
Solution
Upgrade Usermin 1.600 or later.See Also
Plugin Details
Severity: Medium
ID: 77706
File Name: usermin_1_600_mult.nasl
Version: 1.4
Type: remote
Family: CGI abuses : XSS
Published: 9/16/2014
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:webmin:usermin, cpe:/a:usermin:usermin
Required KB Items: www/usermin, Settings/ParanoidReport
Exploit Ease: No exploit is required
Patch Publication Date: 5/20/2014
Vulnerability Publication Date: 5/22/2014