I have tested this vuln successfully on:
* Webmin 1.370
* Usermin 1.300 (as a normal user)

It seems to work under every search box or open file box!!!