CVE:CVE-2014-3884
CNNVD:CNNVD-201407-508
Usermin是澳大利亚软件开发者Jamie Cameron和Webmin社区共同开发的一个用于操作用户级别的任务的Web管理接口，它允许Unix系统中非root用户进行接收邮件、执行SSH和邮件转发配置等任务。
Usermin 1.590及之前的版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade webmin usermin to a higher version than 1.590,0.4,0.5,0.6,0.7,0.80,0.90,0.910,0.929,0.930,0.940,0.950,0.960,0.970,0.980,0.990,1.000,1.010,1.020,1.030,1.040,1.050,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.160,1.170,1.180,1.190,1.200,1.210,1.220,1.230,1.240,1.250,1.260,1.270,1.280,1.290,1.300,1.310,1.320,1.330,1.340,1.350,1.360,1.370,1.380,1.390,1.400,1.410,1.420,1.430,1.440,1.450,1.460,1.470,1.480,1.490,1.500,1.510,1.520,1.530,1.540,1.550,1.560,1.570,1.580,and avoid the version (,1.590],0.4,0.5,0.6,0.7,0.80,0.90,0.910,0.929,0.930,0.940,0.950,0.960,0.970,0.980,0.990,1.000,1.010,1.020,1.030,1.040,1.050,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.160,1.170,1.180,1.190,1.200,1.210,1.220,1.230,1.240,1.250,1.260,1.270,1.280,1.290,1.300,1.310,1.320,1.330,1.340,1.350,1.360,1.370,1.380,1.390,1.400,1.410,1.420,1.430,1.440,1.450,1.460,1.470,1.480,1.490,1.500,1.510,1.520,1.530,1.540,1.550,1.560,1.570,1.580