CVE-2005-3042: usermin

EPSS trend

Probability

4.13%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.13% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

14 links

secunia.com/advisories/16858Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/17282Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200509-17.xmlVendor AdvisoryX Refsource GENTOO
www.osvdb.org/19575VDB EntryX Refsource OSVDB
securityreason.com/securityalert/17Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/14889VDB EntryX Refsource BID
www.vupen.com/english/advisories/2005/1791VDB EntryX Refsource VUPEN
www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.htmlX Refsource MISCPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2005:176Vendor AdvisoryX Refsource MANDRIVA
www.novell.com/linux/security/advisories/2005_24_sr.htmlVendor AdvisoryX Refsource SUSE

Show all 14 references

archives.neohapsis.com/archives/bugtraq/2005-09/0257.htmlMailing ListX Refsource BUGTRAQPatchVendor Advisory
www.webmin.com/changes-1.230.htmlX Refsource CONFIRMPatch
jvn.jp/jp/JVN%2340940493/index.htmlThird Party AdvisoryX Refsource JVN
www.webmin.com/uchanges-1.160.htmlX Refsource CONFIRM

Related vulnerabilities

CVE-2018-19191webminwebmin39.07%7y ago17-03-2019 21:27Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.CVE-2018-8712webminwebmin1.79%8y ago14-03-2018 19:00An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data from the local system (using Local File Include) such as the '/etc/shadow' file via a "GET /syslog/save_log.cgi?view=1&file=/etc/shadow" request.CVE-2003-0101debianwebmin+315.47%23y ago26-02-2003 05:00miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.CVE-2015-2079userminusermin+11.54%1y ago28-04-2025 00:00Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.CVE-2007-1276userminusermin+10.63%19y ago05-03-2007 20:00Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.CVE-2025-61541webminwebmin0.46%1y ago16-10-2025 00:00Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is constructed using the HTTP Host header via get_webmin_email_url(). An attacker can manipulate the Host header to inject a malicious domain into the reset email. If a victim follows the poisoned link, the attacker can intercept the reset token and gain full control of the target account.

All vulnerabilities inusermin webmin

CVE-2005-3042: usermin

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References