1691 matches found
CVE-2018-19191
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
CVE-2018-19191: Improper Neutralization of Input During Web Page Generation
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...
PT-2019-9756
Name of the Vulnerable Software and Affected Versions Webmin version 1.890 Description The issue concerns an XSS vulnerability. It can be exploited via several API endpoints, including "/config.cgi?webmin", the history parameter in "/shell/index.cgi", the "/shell/index.cgi?stripped=1" endpoint, o...
Webmin 1.900 Upload Authenticated Remote Command Execution Exploit
This Metasploit module exploits an arbitrary command execution vulnerability in Webmin 1.900 and lower versions. Any user authorized to the "Upload and Download" module can execute arbitrary commands with root privileges. In addition, if the Running Processes proc privilege is set the user can...
Webmin 1.900 Upload Authenticated Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin Upload Authenticated RCE', 'Description' = %q This module exploits an arbitrary command execution vulnerability in Webmin 1.900 and lower...
Webmin cgi Upload Remote Code Execution (CVE-2019-9624)
A remote code execution vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2019-9624
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
CVE-2019-9624
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
Design/Logic Flaw
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
CVE-2019-9624
CVE-2019-9624 affects Webmin up to version 1.900 (and lower per sources). An authenticated user with the Upload and Download privilege can upload a crafted .cgi file via the /updown/upload.cgi URI, which enables remote code execution on the server. Exploitation is described as an authenticated RC...
CVE-2019-9624
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
CVE-2019-9624
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
Webmin 1.900 Upload Execution
Webmin 1.900 allows authenticated users with “Upload and Download” module access to upload cgi files to a webroot subdirectory and the uploaded files can be executed by sending requests to the web server. Recent assessments: jrobles-r7 at May 09, 2019 5:57pm UTC reported: Details Webmin 1.900...
Webmin Arbitrary Code Execution Vulnerability
Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. An arbitrary code execution vulnerability exists in Webmin 1.900. A remote attacker can use the "Java File Manager" and "Upload and Download" privileges to uploa...
PT-2019-4220
Name of the Vulnerable Software and Affected Versions Webmin version 1.900 Description The issue is related to insufficient access control in the Webmin control panel, allowing remote attackers to execute arbitrary code. This can be achieved by uploading a crafted .cgi file via the...
CVE-2019-9624: Improper Privilege Management
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...
Usermin 1.750 - Remote Command Execution (Metasploit)
Usermin 1.750 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' = %q...
Webmin Remote Command Execution Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. A remote command execution vulnerability exists in Webmin. An attacker can exploit the vulnerability to execute arbitrary commands...
Webmin <= 1.941 RCE Vulnerability
Webmin is prone to an authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Webmin 1.900 - Remote Command Execution Exploit
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Webmin 1.900 - Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...