5 matches found
Webmin 1.973 Cross Site Request Forgery
Exploit Title: Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery CSRF Date: 24/04/2021 Exploit Author: Mesh3l911 & Z0ldyck Vendor Homepage: https://www.webmin.com Repo Link: https://github.com/Mesh3l911/CVE-2021-31761 Version: Webmin 1.973 Tested on: All versions POC By \0331;m...
CVE-2021-31761
Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...
CVE-2021-31761
Summary: CVE-2021-31761 affects Webmin 1.973, exposing a reflected XSS that enables Remote Command Execution through Webmin’s “running process” feature. Connected sources confirm the vulnerability class (reflected XSS) and RCE impact, and provide evidence of exploitation attempts (e.g., CSRF/XSS ...