CVE:CVE-2007-1276
CNNVD:CNNVD-200703-190
Webmin 1.330之前版本和Usermin 1.260之前版本的chooser.cgi中存在多个跨站脚本攻击漏洞。远程攻击者可以借助一个特制的文件名，注入任意的web脚本或HTML。
solution:Upgrade usermin usermin to a higher version than 1.000,1.010,1.020,1.030,1.040,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.210,1.220,1.230,1.240,1.250,and avoid the version 1.000,1.010,1.020,1.030,1.040,1.051,1.060,1.070,1.080,1.090,1.100,1.110,1.120,1.130,1.140,1.150,1.210,1.220,1.230,1.240,1.250; Upgrade webmin webmin to a higher version than 1.0.00,1.0.10,1.0.20,1.0.30,1.0.40,1.0.50,1.0.51,1.0.60,1.0.70,1.0.80,1.0.90,1.1.00,1.1.10,1.1.20,1.1.21,1.1.30,1.1.40,1.1.50,1.2.20,1.2.30,1.2.40,1.2.50,1.3.20,and avoid the version 1.0.00,1.0.10,1.0.20,1.0.30,1.0.40,1.0.50,1.0.51,1.0.60,1.0.70,1.0.80,1.0.90,1.1.00,1.1.10,1.1.20,1.1.21,1.1.30,1.1.40,1.1.50,1.2.20,1.2.30,1.2.40,1.2.50,1.3.20