News
Vigil@nce - Webmin: Cross Site Scripting via Real Name
November 2012 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can generate a Cross Site Scripting in the user
information form of Webmin, in order to execute JavaScript code in
the context of the web site.
– Impacted products: Webmin
– Severity: 2/4
– Creation date: 05/11/2012
DESCRIPTION OF THE VULNERABILITY
The "passwd" module of Webmin is used to change information on
users, such as the "Real Name" field.
However, this field is not filtered before being inserted in a
generated HTML page. For one field processed in the file
edit_passwd.cgi, escaping for HTML is missing; and for the
construction of an URL in the file index.cgi, URL escaping is
missing.
An attacker can therefore create a Cross Site Scripting in the
user information form of Webmin, in order to execute JavaScript
code in the context of the web site.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Webmin-Cross-Site-Scripting-via-Real-Name-12110
