CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The...

CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The...

CVE-2024-12828

CVE-2024-12828 affects Webmin CGI handling, where unsanitized user input in CGI requests leads to command injection and remote code execution in the root context. The issue arises from improper validation before executing system calls. Public sources (including NVD, OSV, CIRCL, and related adviso...

CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The...

webmin -- CGI Command Injection Remote Code Execution

Webmin reports: A less-privileged Webmin user can execute commands as root via a vulnerability in the shell autocomplete feature...

Webmin 操作系统命令注入漏洞

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. Webmin suffers from an operating system command injection vulnerability that stems from a lack of proper validation of user-supplied strings before executing system calls,...

CVE-2024-12828: Improper Neutralization of Special Elements used in an OS Command

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The...

The vulnerability of the Webmin CGI request handler allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the Webmin CGI request handler relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges remotely...

Webmin CGI Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied...

CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

Webmin Usermin 安全漏洞

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A security vulnerability exists in Webmin Usermin version 2.100, which stems from a discrepancy in the error message for the presence of an invalid login attempt,...

CVE-2024-44762: Generation of Error Message Containing Sensitive Information

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

CVE-2024-44762

Webmin Usermin version 2.100 and below is vulnerable to username enumeration due to a discrepancy in error reporting. An attacker can determine valid user accounts by analyzing response messages from the password_change.cgi script or the password change endpoint. This flaw allows for brute-force ...

CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

The vulnerability of the Webmin control panel for hosting services, related to a loop with an unreachable exit condition, allows attackers to cause a service failure.

The vulnerability of the Webmin control panel involves a cycle with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the Webmin control panel in hosting systems stems from improper handling of input data during the generation of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel involves the elimination of input data during the generation of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by injecting specially created malicious content...

The vulnerability of the Webmin control panel for hosting services stems from incorrect permissions and privileges, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Webmin control panel involves incorrect permissions and privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...