Lucene search
+L

11 matches found

OSV
OSV
•added 2019/03/07 5:29 a.m.•27 views

CVE-2019-9624

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...

7.8CVSS8AI score
SaveExploits0References3
Prion
Prion
•added 2019/03/07 5:29 a.m.•26 views

Design/Logic Flaw

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...

6.8CVSS8AI score0.23689EPSS
SaveExploits4References3Affected Software1
Mend
Mend
•added 2019/03/07 5:00 a.m.•5 views

CVE-2019-9624

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...

8.5CVSS0.23689EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
•added 2019/03/07 12:00 a.m.•4 views

PT-2019-4220

Name of the Vulnerable Software and Affected Versions Webmin version 1.900 Description The issue is related to insufficient access control in the Webmin control panel, allowing remote attackers to execute arbitrary code. This can be achieved by uploading a crafted .cgi file via the...

7.8CVSS0.23689EPSS
SaveExploits4References8
CNVD
CNVD
•added 2019/03/07 12:00 a.m.•19 views

Webmin Arbitrary Code Execution Vulnerability

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. An arbitrary code execution vulnerability exists in Webmin 1.900. A remote attacker can use the "Java File Manager" and "Upload and Download" privileges to uploa...

7.8CVSS8.5AI score0.23689EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/07 12:00 a.m.•9 views

CVE-2019-9624: Improper Privilege Management

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...

7.8CVSS6.6AI score0.23689EPSS
SaveExploits4References2
zdt
zdt
•added 2019/02/28 12:00 a.m.•56 views

Usermin 1.750 - Remote Command Execution Exploit

Exploit for linux platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' ...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/02/28 12:00 a.m.•39 views

Usermin 1.750 - Remote Command Execution (Metasploit)

Usermin 1.750 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Usermin 1.750 - Remote Command Execution', 'Description' = %q...

7.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/01/18 12:00 a.m.•39 views

Webmin 1.900 - Remote Command Execution (Metasploit)

Webmin 1.900 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Webmin 1.900 - Remote Command Execution', 'Description' = %q...

7.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/01/18 12:00 a.m.•56 views

Webmin 1.900 Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Webmin 1.900 - Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/01/18 12:00 a.m.•74 views

Webmin 1.900 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Webmin 1.900 - Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

7.8CVSS7.3AI score0.23689EPSS
SaveExploits4
Rows per page
Query Builder