CVE-2021-31762

..| CVE-2021-31762 |.. Описание : Эксплуатация атаки межсайтовой подделки запроса CSRF для создания привилегированного пользователя через функцию добавления пользователей Webmin, а затем получение обратного shell через функцию запуска процесса Webmin Протестированная версия : Webmin 1.973 последн...

CVE-2021-31760

..| CVE-2021-31760 |.. 설명 : Webmin의 실행 중인 프로세스 기능을 통해 사이트 간 요청 위조CSRF 공격을 악용하여 원격 명령 실행RCE을 얻는 방법 테스트 버전 : Webmin 1.973 GitHub 최신 버전 2021/03/07 공격 유형 : 원격 영향 : 원격 명령 실행 PoC 익스플로잇 코드 : YouTube PoC : https://youtu.be/D45FN8QrzDo 제품 공급업체 : https://www.webmin.com 추가 정보 : "Webmin은 Unix 계열 서버 및 서비스를 위한...

CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

CVE-2021-31762

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

PT-2021-19494

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description The issue allows for Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature. This means an attacker could potentially execute commands on a remote syste...

CVE-2021-31760: Cross-Site Request Forgery (CSRF)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...