webmin1390-xss.txt
Posted on 07 February 2008
Aria-Security Team (Persian Security Network) http://Aria-Security.Net ---------------------------------- Tested on Webmin 1.390 Cross Site Scripting This vuln was tested on Webmin as an administrator account (root) and it has worked on the search section (file) of the system. Value Inserted: "><script>alert('Discovered By Aria-Security')</script> Regards, Aria-Security Team (Persian Security Network) The-0utl4w Credits Goes to Aria-Security Team ---------------------------------- for more info visit: http://forum.aria-security.net/forumdisplay.php?f=60
