I have tested this vuln successfully on: * Webmin 1.370 * Usermin 1.300 (as a normal user) It seems to work under every search box or open file box!!!