CVE-2018-19191

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall…

published March 17, 2019

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.39067 · 98.6th percentile
Published
2019-03-17T21:27Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 39% → 16%
    epss
  • 06 SEP 03:11Z
    EPSS moved 39% → 16%
    epss
  • 30 AUG 16:01Z
    EPSS moved 16% → 39%
    epss
  • 29 AUG 04:36Z
    EPSS moved 39% → 16%
    epss
  • 17 MAR 21:27Z
    Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall…
    cvelistv5