Webadmin
Vendor:
First CVE: Aug 7, 2003 · Active for 22 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
4.7
Avg CVSS
Higher Avg CVSS than 6% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Webadmin over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 7, 2003
22 years ago
Most Recent CVE
Sep 7, 2006
7,261 days ago
CVE Severity & Scoring
Webadmin8 CVEs
25%
50%
25%
All CVEs352,427 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown8 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown8 (100.0%)
User Interaction
None0 (0.0%)
Unknown8 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown8 (100.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2003-0471HIGH Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument. | Aug 7, 2003 | 7.5 | 70 | NO | YES |
CVE-2006-4370HIGH Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and ga | Aug 26, 2006 | 7.5 | 20 | NO | NO |
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation pat | Dec 31, 2003 | 3.5 | 20 | NO | YES |
CVE-2005-0317MEDIUM Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter. | Jan 28, 2005 | 4.3 | 18 | NO | NO |
CVE-2005-0319MEDIUM Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which | Jan 28, 2005 | 4.3 | 18 | NO | NO |
CVE-2006-4620MEDIUM The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privile | Sep 7, 2006 | 4.6 | 14 | NO | NO |
CVE-2006-4371MEDIUM Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to | Aug 26, 2006 | 4.0 | 14 | NO | NO |
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account in | Jan 28, 2005 | 2.1 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
12.5% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
25.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Webadmin
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.2.4 | 3 | 5.4 | 1.9% | 0 | 0 |
| 3.2.3 | 3 | 5.4 | 1.9% | 0 | 0 |
| 3.0.3 | 2 | 4.5 | 1.2% | 0 | 0 |
| 3.0.2 | 3 | 3.7 | 1.0% | 0 | 0 |
| 2.0.2 | 1 | 3.5 | 2.1% | 0 | 1 |
| 2.0.1 | 1 | 3.5 | 2.1% | 0 | 1 |
| 2.0.0 | 1 | 3.5 | 2.1% | 0 | 1 |