CVE ID:	CVE-2012-2983
Description:	file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2983 CERT/CC vulnerability note: VU#788478 http://www.kb.cert.org/vuls/id/788478 http://americaninfosec.com/research/index.html http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf http://www.securitytracker.com/id?1027507