CVE-2012-2982

CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

Markdown Webmin 1.580 RCE Execution Guide Quick reference for executing authenticated Remote Code Execution RCE on Webmin 1.580 via the /file/show.cgi component. 1. Attack Machine Listener Run this command on your local machine to catch the incoming connection before executing the payload: rlwrap...

CVE-2012-2982-Webmin-RCE

Webadmin 1.580 RCE PoC CVE-2012-2982 This repository contains a Python proof-of-concept PoC exploit for Webmin version 1.580 , which is vulnerable to Remote Command Execution RCE due to improper input sanitization. The vulnerability exists in the file/show.cgi component and allows an authenticate...

CVE-2012-2982

CVE-2012-2982 also known as /file/show.cgi Remote Command Execution A simple CVE-2012-2982 poc...

CVE-2012-2982

CVE-2012-2982 Este script de Python está escrito para la vulnerabilidad en Webmin 1.580, CVE-2012-2982. La vulnerabilidad existe en el componente /file/show.cgi y permite a un usuario autenticado, con acceso al Módulo de Administrador de Archivos, ejecutar comandos arbitrarios con privilegios de...

CVE-2012-2982

CVE-2012-2982 John Hammond | 4 de septiembre de 2021 Revisando searchsploit para Webmin 1.580 solo vi un módulo de Metasploit para el ataque de Ejecución Remota de Código en /file/show.cgi en esa versión legacy de Webmin. Este código es un intento de recrear eso en Python sin usar Metasploit...

PT-2026-93188

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7 web auth user show.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated...

PT-2026-93192

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns wan list show.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewe...

PT-2026-93193

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user pass show.cgi component. Low-privilege attackers can exploit this flaw via ui config 2.xml and misc.js to disclose router credentials...

Webmin show.cgi Command Execution (CVE-2012-2982)

A command execution vulnerability has been reported in Webmin...

Webmin show.cgi Open Function Call Command Execution

Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...

CVE-2012-2982

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character...

CVE-2012-2982

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character...

CVE-2012-2982: Undefined Security Weakness

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character...

CVE-2012-4893: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that 1 read files or execute 2 tar, 3 zip, or 4 gzip commands, a different issue than CVE-2012-2982...