{"id":"CVE-2002-1673","url":"https://www.cyber-defence.io/tools/cve/CVE-2002-1673","generatedAt":"2026-10-27T20:51:09.262Z","title":"The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields,…","description":"The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.","published":"2002-12-31T05:00:00.000Z","lastModified":"2026-06-16T21:59:46.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":3.6,"severity":"LOW","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N"},"cwe":[],"affected":["webmin/webmin"],"epss":{"score":0.0079,"percentile":0.55994,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2002-03-20","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":21348,"kind":"exploit","title":"Webmin 0.x - Code Input Validation","url":"https://www.exploit-db.com/exploits/21348","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/21348.txt","file":"exploits/linux/local/21348.txt","published":"2002-03-20","added":"2002-03-20","updated":"2012-09-17","author":"prophecy","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2002-1673","OSVDB-20873"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/4329/info"}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is low and EPSS is 0.8%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://online.securityfocus.com/archive/1/263181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4329","tags":["Exploit","Patch"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8596","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4329","tags":["Exploit","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8596","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1673","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}