CVE-2021-31760

CVE-2021-31760 affects Webmin 1.973. Several connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability that can achieve Remote Command Execution (RCE) via Webmin’s “running process” feature. Exploitation is described in multiple entries (NVD/OSV/Red Hat/CNNVD) with Webmin 1.973 ...

CVE-2021-31760

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

Exploit for Cross-site Scripting in Webmin

..| XSS to RCE CRON|.. Description : Exploiting a Reflected...

PT-2021-19495

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description The issue is related to reflected Cross Site Scripting XSS that can lead to Remote Command Execution. This is achieved through Webmin's running process feature. Recommendations For Webmin version 1.973, at the...

CVE-2021-31761: Improper Neutralization of Input During Web Page Generation

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

CVE-2021-31760: Cross-Site Request Forgery (CSRF)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

CVE-2021-31762: Cross-Site Request Forgery (CSRF)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

PT-2021-19494

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description The issue allows for Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature. This means an attacker could potentially execute commands on a remote syste...

PT-2021-19496

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description The issue allows for Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature. Recommendations For...

Webmin 跨站请求伪造漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. An attacker can use this vulnerability to create an elevated privilege user via Webmin...

Webmin 跨站请求伪造漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin's ru...

Webmin 跨站脚本漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A reflective cross-site scripting vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CSRF to RCE CRON |.. Description : Exploiting a Cross-s...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploit...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31762 |.. Description : Exploiting a Cross-sit...

Exploit for Cross-site Scripting in Webmin

CVE-2021-31761 Description : Exploiting a Reflected Cross-S...

Exploit for Cross-site Scripting in Webmin

..| CVE-2021-31761 |.. Description : Exploiting a Reflected...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31760 |.. Description : Exploiting a Cross-sit...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31760 |.. Description : Exploiting a Cross-sit...

Webmin Command Injection (CVE-2019-12840)

A command injection vulnerability exists in Webmin . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...