CVE-2002-1673

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-31 · updated 2026-06-16

Description

The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.

Affected products

Webmin: 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+19)

References

http://online.securityfocus.com/archive/1/263181
http://www.securityfocus.com/bid/4329
https://exchange.xforce.ibmcloud.com/vulnerabilities/8596
http://online.securityfocus.com/archive/1/263181
http://www.securityfocus.com/bid/4329
https://exchange.xforce.ibmcloud.com/vulnerabilities/8596

Get alerted when CVE-2002-1673 or the next vulnerability affects your stack