CVE:CVE-2009-4568
CNNVD:CNNVD-201001-311
Webmin和Usermin都是澳大利亚软件开发者Jamie Cameron和Webmin社区共同开发的产品。Webmin是一套基于Web的用于类Unix操作系统中的系统管理工具；Usermin是一个用于操作用户级别的任务的Web管理接口，它允许非root用户进行接收邮件、执行SSH和邮件转发配置等任务。
Webmin 1.390及之前版本和Usermin 1.32及之前版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade webmin usermin to a higher version than 1.32,0.4,0.5,0.6,0.7,0.8,0.9,0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.000,1.3,1.010,1.020,1.030,1.040,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.210,1.220,1.230,1.240,1.250,1.260,1.270,1.280,and avoid the version (,1.32],0.4,0.5,0.6,0.7,0.8,0.9,0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.000,1.3,1.010,1.020,1.030,1.040,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.210,1.220,1.230,1.240,1.250,1.260,1.270,1.280; Upgrade webmin webmin to a higher version than 1.390,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.21,0.22,0.31,0.41,0.42,0.51,0.76,0.77,0.78,0.79,0.80,0.83,0.84,0.85,0.88,0.90,0.91,0.92,0.92.1,0.93,0.94,0.95,0.96,0.97,0.98,0.99,0.950,0.960,0.970,0.980,0.990,1.0.10,1.0.20,1.0.30,1.0.40,1.0.50,1.0.51,1.0.60,1.0.70,1.0.80,1.0.90,1.1.00,1.1.10,1.1.20,1.1.21,1.1.30,1.1.40,1.1.50,1.1.60,1.2.20,1.2.30,1.2.40,1.2.50,1.2.60,1.2.70,1.2.80,1.2.90,1.3.20,1.3.30,1.335,1.336,1.337,1.340,1.343,1.360,1.370,and avoid the version (,1.390],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.21,0.22,0.31,0.41,0.42,0.51,0.76,0.77,0.78,0.79,0.80,0.83,0.84,0.85,0.88,0.90,0.91,0.92,0.92.1,0.93,0.94,0.95,0.96,0.97,0.98,0.99,0.950,0.960,0.970,0.980,0.990,1.0.10,1.0.20,1.0.30,1.0.40,1.0.50,1.0.51,1.0.60,1.0.70,1.0.80,1.0.90,1.1.00,1.1.10,1.1.20,1.1.21,1.1.30,1.1.40,1.1.50,1.1.60,1.2.20,1.2.30,1.2.40,1.2.50,1.2.60,1.2.70,1.2.80,1.2.90,1.3.20,1.3.30,1.335,1.336,1.337,1.340,1.343,1.360,1.370