CVE-2006-4542

Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site…

published September 5, 2006

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03216 · 88.1th percentile
Published
2006-09-05T23:00Z
EPSS history
Timeline
  • 05 SEP 23:00Z
    Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site…
    cvelistv5