Cross-Site Request Forgery

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running…CVE-2021-31762Webmin · 8.8% likely

   CWE-352

2. Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature.CVE-2021-31760Webmin · 8.5% likely

   CWE-352

3. CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrary commands.CVE-2017-15645Webmin · 3.2% likely

   CWE-352

4. A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature.CVE-2021-32162Webmin · 2.6% likely

   CWE-352

5. A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature.CVE-2021-32159Webmin · 2.3% likely

   CWE-352

6. A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.CVE-2021-32156Webmin · 2.3% likely

   CWE-352

7. Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed wh…CVE-2024-36452Webmin · CVSS 3.1 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.