PT-2019-14314

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.920 Description The issue allows authenticated remote code execution via a crafted object name. This is because the unserialise variable function makes an eval call. It's noted that RPC can be used to run any command...