6.8

CVE-2006-4542: usermin Cross-site Scripting

CVSS: 6.8v2.0MediumModified
Published 05-09-2006Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2006-4542 is a medium (CVSS 6.8) Cross-site Scripting vulnerability in usermin. EPSS estimates a 3.22% chance of exploitation in the next 30 days, higher than 88% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
3.22%
0%100%
Low · +0.06 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
DSA-1199-1

Timeline

  1. 05-09-2006
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

3.22%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

+0.06 pp

From 3.16% on 20-09-2026

20-09-202620-10-2026
EPSS score
3.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Usermin1 product
  • usermin≤ 1.220 | 0.4 | 0.5 | 0.6 | 0.7 | 0.8 | 0.9 | 0.91 | 0.92 | 0.93 | 0.94 | 0.95 | 0.96 | 0.97 | 0.98 | 0.99 | 1.000 | 1.010 | 1.020 | 1.030 | 1.040 | 1.051 | 1.060 | 1.070 | 1.080 | 1.090 | 1.100 | 1.110 | 1.120 | 1.130 | 1.140 | 1.150 | 1.210
Webmin1 product
  • webmin≤ 1.2.90 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.21 | 0.22 | 0.31 | 0.41 | 0.42 | 0.51 | 0.76 | 0.77 | 0.78 | 0.79 | 0.80 | 0.83 | 0.84 | 0.85 | 0.88 | 0.90 | 0.91 | 0.92 | 0.92.1 | 0.93 | 0.94 | 0.95 | 0.96 | 0.97 | 0.98 | 0.99 | 1.0.00 | 1.0.10 | 1.0.20 | 1.0.30 | 1.0.40 | 1.0.50 | 1.0.51 | 1.0.60 | 1.0.70 | 1.0.80 | 1.0.90 | 1.1.00 | 1.1.10 | 1.1.20 | 1.1.21 | 1.1.30 | 1.1.40 | 1.1.50 | 1.2.20 | 1.2.30 | 1.2.40 | 1.2.50 | 1.2.60 | 1.2.70 | 1.2.80

2 vendors · 2 products

References

16 links
Show all 16 references