MDVSA-2011:109 -- Mandriva webmin| ID: oval:org.secpod.oval:def:301036 | Date: (C)2012-01-07 (M)2021-06-02 |
| Class: PATCH | Family: unix |
A vulnerability was discovered and corrected in webmin: Cross-site scripting vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real field, related to useradmin/index.cgi and useradmin/user-lib.pl . Packages for 2009.0 are provided as of the Extended Maintenance Program
| Platform: |
| Mandriva Linux 2010.1 |
| Mandriva Linux 2009.0 |
