1691 matches found
Webmin 1.890 < 1.930 Remote Command Execution
According to its self-reported version, the Webmin install hosted on the remote host is 1.890 to 1.920. It is, therefore, affected by a remote command execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin < 1.870 Cross-Site Scripting Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.870. It is, therefore, affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
Webmin < 1.850 Multiple Cross-Site Scripting Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.850. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin < 1.830 Multiple Cross-Site Scripting Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.830. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Webmin < 1.730 Read Mail Symlink Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.730. It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. Note that the scanner has not tested for these issues but has instead...
Webmin < 1.760 xmlrpc.cgi Cross-Site Scripting Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.760. It is, therefore, affected by a cross-site scripting vulnerability in xmlrpc.cgi, which could potentially lead to remote code execution in certain products. Note that the scanner has not tested...
Webmin < 1.860 Multiple Vulnerabilities
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.860. It is, therefore, affected by multiple vulnerabilities. - A Server-Side Request Forgery via the PATHINFO to tunnel/link.cgi - A Cross-Site Request Forgery - A Cross-Site Scripting under the...
Webmin 1.920 rpc.cgi Remote Root Exploit
This Metasploit module exploits Webmin versions 1.930 and below. This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to gain root. The only prerequisite is a valid session id. This module requires Metasploit:...
Webmin 1.920 rpc.cgi Remote Root
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Webmin %q This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to...
Webmin < 1.920 - 'rpc.cgi' Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Webmin %q This exploit takes advantage of a code execution issue within the function unserialisevariable located in web-lib-funcs.pl, in order to...
Exploit for Code Injection in Webmin
CVE-2019-15642 Webmin Remote Code Execution authenticated...
MGASA-2019-0237 Updated webmin packages fix security vulnerability
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled CVE-2019-15107. Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default...
Updated webmin packages fix security vulnerability
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled CVE-2019-15107. Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default...
Webmin < 1.930 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in reset password component due to an insecure default configuration. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Webmin Code Injection Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. A code injection vulnerability exists in Webmin. An attacker can exploit this vulnerability to execute code with the help of specially crafted object names...
Webmin <= 1.930 XXE Vulnerability
Webmin is prone to an authenticated XXE vulnerability in xmlrpc.cgi. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Webmin < 1.930 RCE Vulnerability
Webmin is prone to an authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Webmin Code Issue Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. Webmin is vulnerable to a code issue. The vulnerability arises from an improper design or implementation during code development of a Web system or product. No details of the vulnerability are available at this...
