CVEvulnerability
CVE-2014-3884
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
Affected configurations
• webmin usermin (<= 1.590)
• webmin usermin 0.4
• webmin usermin 0.5
• webmin usermin 0.6
• webmin usermin 0.7
• webmin usermin 0.80
• webmin usermin 0.90
• webmin usermin 0.910
• webmin usermin 0.929
• webmin usermin 0.930
• webmin usermin 0.940
• webmin usermin 0.950
• webmin usermin 0.960
• webmin usermin 0.970
• webmin usermin 0.980
• webmin usermin 0.990
• webmin usermin 1.000
• webmin usermin 1.010
• webmin usermin 1.020
• webmin usermin 1.030
• webmin usermin 1.040
• webmin usermin 1.050
• webmin usermin 1.051
• webmin usermin 1.060
• webmin usermin 1.070
• webmin usermin 1.080
• webmin usermin 1.090
• webmin usermin 1.100
• webmin usermin 1.110
• webmin usermin 1.120
• webmin usermin 1.130
• webmin usermin 1.140
• webmin usermin 1.150
• webmin usermin 1.160
• webmin usermin 1.170
• webmin usermin 1.180
• webmin usermin 1.190
• webmin usermin 1.200
• webmin usermin 1.210
• webmin usermin 1.220
• webmin usermin 1.230
• webmin usermin 1.240
• webmin usermin 1.250
• webmin usermin 1.260
• webmin usermin 1.270
• webmin usermin 1.280
• webmin usermin 1.290
• webmin usermin 1.300
• webmin usermin 1.310
• webmin usermin 1.320
• webmin usermin 1.330
• webmin usermin 1.340
• webmin usermin 1.350
• webmin usermin 1.360
• webmin usermin 1.370
• webmin usermin 1.380
• webmin usermin 1.390
• webmin usermin 1.400
• webmin usermin 1.410
• webmin usermin 1.420
… and 16 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN92737498/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000058 Vendor Advisory
- http://jvn.jp/en/jp/JVN92737498/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000058 Vendor Advisory