Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-36446
CRITICAL
CVSS:
9.8
Published: 2022-07-25
Modified: 2026-06-17
Description
software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
Affected Platforms
Webmin Webmin
Weakness Type
CWE-116
References
http://packetstormsecurity.com/files/167894/Webmin-1.996-Remote-Code-Execution.h…
http://packetstormsecurity.com/files/168049/Webmin-Package-Updates-Command-Injec…
https://gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b
https://github.com/webmin/webmin/commit/13f7bf9621a82d93f1e9dbd838d1e22020221bde
https://github.com/webmin/webmin/compare/1.996...1.997
https://www.exploit-db.com/exploits/50998