• info
• discussion
• exploit
• solution
• references

Webmin and Usermin HTML Injection and Information Disclosure Vulnerability

Solution:
The vendor has released an update that addresses this vulnerability. Please see the vendor references for more information.


Webmin Webmin 1.210

• Mandriva webmin-1.121-4.7.C30mdk.noarch.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

Webmin Webmin 1.220

• Mandriva webmin-1.220-9.5.20060mdk.noarch.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva webmin-1.220-9.7.20060mlcs4.noarch.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download

Webmin Webmin 1.290

• Mandriva webmin-1.290-4.1mdv2007.0.noarch.rpm
  Mandriva Linux 2007.0:
  http://www.mandriva.com/en/download