Security Advisory

CVE-2011-1937

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-05-31 20:00:00

Last updated 2024-08-06 22:46:00

Assigner redhat

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.

← Browse all CVEs View on cve.org ↗