1373 matches found
Webmin 1.840 Local File Inclusion Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
Webmin < 1.730 Read Mail Symlink Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.730. It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. Note that the scanner has not tested for these issues but has instead...
Webmin < 1.870 Cross-Site Scripting Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.870. It is, therefore, affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
Webmin 1.890 < 1.930 Remote Command Execution
According to its self-reported version, the Webmin install hosted on the remote host is 1.890 to 1.920. It is, therefore, affected by a remote command execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin < 1.860 Multiple Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.860. It is, therefore, affected by multiple vulnerabilities. - A Server-Side Request Forgery via the PATHINFO to tunnel/link.cgi - A Cross-Site Request Forgery - A Cross-Site Scripting under the...
Webmin < 1.830 Multiple Cross-Site Scripting Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.830. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin < 1.850 Multiple Cross-Site Scripting Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.850. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin 1.920 rpc.cgi Remote Root
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Webmin %q This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to...
Webmin 1.920 rpc.cgi Remote Root Exploit
This Metasploit module exploits Webmin versions 1.930 and below. This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to gain root. The only prerequisite is a valid session id. This module requires Metasploit:...
Webmin < 1.920 - 'rpc.cgi' Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Webmin %q This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to...
Exploit for Code Injection in Webmin
CVE-2019-15642 Webmin Remote Code Execution authenticated...
MGASA-2019-0237 Updated webmin packages fix security vulnerability
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled CVE-2019-15107. Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default...
Updated webmin packages fix security vulnerability
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled CVE-2019-15107. Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default...
Webmin < 1.930 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in reset password component due to an insecure default configuration. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Webmin Code Issue Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. Webmin is vulnerable to a code issue. The vulnerability arises from an improper design or implementation during code development of a Web system or product. No details of the vulnerability are available at this...
Webmin Code Injection Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. A code injection vulnerability exists in Webmin. An attacker can exploit this vulnerability to execute code with the help of specially crafted object names...
Webmin <= 1.930 XXE Vulnerability
Webmin is prone to an authenticated XXE vulnerability in xmlrpc.cgi. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Webmin < 1.930 RCE Vulnerability
Webmin is prone to an authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2019-15642
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...