file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character...
6.5CVSS7AI score0.62181EPSS
SaveExploits10References6
Cvelist•added 2012/09/11 6:0 p.m.•37 views
CVE-2012-2982
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character...