CVE-2004-1468: Usermin

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.

Affected products

• Usermin Usermin: version 1.000 only; version 1.010 only; version 1.020 only; version 1.030 only; version 1.040 only; version 1.051 only; …
• Webmin Webmin: version 1.0.00 only; version 1.0.20 only; version 1.0.50 only; version 1.0.60 only; version 1.0.70 only; version 1.0.80 only; …

Published 2004-12-31. Last modified 2026-06-16.