Lucene search
+L

1378 matches found

Exploit DB
Exploit DB
added 2021/07/20 12:0 a.m.358 views

Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)

Exploit Title: Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery CSRF Date: 24/04/2021 Exploit Author: Mesh3l911 & Z0ldyck Vendor Homepage: https://www.webmin.com Repo Link: https://github.com/Mesh3l911/CVE-2021-31761 Version: Webmin 1.973 Tested on: All versions POC By \0331;m...

9.6CVSS8.3AI score0.33569EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2021/07/14 12:0 a.m.451 views

Webmin 1.973 Cross Site Request Forgery

Exploit Title: Webmin 1.973 - Cross-Site Request Forgery CSRF Date: 24/04/2021 Exploit Author: Mesh3l911 & Z0ldyck Vendor Homepage: https://www.webmin.com Repo Link: https://github.com/Mesh3l911/CVE-2021-31762 Version: Webmin 1.973 Tested on: All versions POC By \0331;m \0331;37mMesh3l\0331;m...

6.8CVSS0.6AI score0.0878EPSS
SaveExploits6
zdt
zdt
added 2021/07/14 12:0 a.m.166 views

Webmin 1.973 - Cross-Site Request Forgery (CSRF) Exploit

Exploit Title: Webmin 1.973 - Cross-Site Request Forgery CSRF Exploit Author: Mesh3l911 & Z0ldyck Vendor Homepage: https://www.webmin.com Repo Link: https://github.com/Mesh3l911/CVE-2021-31762 Version: Webmin 1.973 Tested on: All versions POC By \0331;m \0331;37mMesh3l\0331;m \0331;36m...

8.8CVSS1.3AI score0.0878EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2021/07/14 12:0 a.m.722 views

Webmin 1.973 - 'save_user.cgi' Cross-Site Request Forgery (CSRF)

Exploit Title: Webmin 1.973 - 'saveuser.cgi' Cross-Site Request Forgery CSRF Date: 24/04/2021 Exploit Author: Mesh3l911 & Z0ldyck Vendor Homepage: https://www.webmin.com Repo Link: https://github.com/Mesh3l911/CVE-2021-31762 Version: Webmin 1.973 Tested on: All versions POC By \0331;m...

8.8CVSS7.8AI score0.0878EPSS
SaveExploits6
OSV
OSV
added 2021/07/12 8:26 p.m.6 views

MGASA-2021-0344 Updated webmin package fixes security vulnerability

The webmin package has been updated to version 1.979, which has fixes for handling un-trusted inputs in the Network Configuration module. Also, the openvpn module has been updated to version 3.2...

7AI score
SaveExploits0References4
Mageia
Mageia
added 2021/07/12 8:26 p.m.29 views

Updated webmin package fixes security vulnerability

The webmin package has been updated to version 1.979, which has fixes for handling un-trusted inputs in the Network Configuration module. Also, the openvpn module has been updated to version 3.2...

3.2AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2021/07/02 7:51 p.m.76 views

Exploit for OS Command Injection in Webmin

CVE-2019-15107 Webmin Exploit CVE-2019-15107 An issue was di...

10CVSS9.7AI score0.99766EPSS
SaveExploits39
CNVD
CNVD
added 2021/04/26 12:0 a.m.47 views

Webmin Cross-Site Request Forgery Vulnerability (CNVD-2021-31908)

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin's ru...

8.8CVSS7AI score0.08485EPSS
SaveExploits3References1
CNVD
CNVD
added 2021/04/26 12:0 a.m.56 views

Webmin Cross-Site Request Forgery Vulnerability (CNVD-2021-31910)

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. An attacker can use this vulnerability to create an elevated privilege user via Webmin...

8.8CVSS6.7AI score0.0878EPSS
SaveExploits6References1
OpenVAS
OpenVAS
added 2021/04/26 12:0 a.m.40 views

Webmin <= 1.973 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS8.8AI score0.33569EPSS
SaveExploits15References4
CNVD
CNVD
added 2021/04/26 12:0 a.m.16 views

Webmin cross-site scripting vulnerability (CNVD-2021-31909)

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A reflective cross-site scripting vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin...

9.6CVSS6.4AI score0.33569EPSS
SaveExploits6References1
NVD
NVD
added 2021/04/25 7:15 p.m.37 views

CVE-2021-31760

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

8.8CVSS0.08485EPSS
SaveExploits3References4
NVD
NVD
added 2021/04/25 7:15 p.m.26 views

CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

9.6CVSS0.33569EPSS
SaveExploits6References5
OSV
OSV
added 2021/04/25 7:15 p.m.23 views

CVE-2021-31762

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

8.8CVSS6.8AI score
SaveExploits0References5
OSV
OSV
added 2021/04/25 7:15 p.m.25 views

CVE-2021-31760

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

8.8CVSS7.3AI score
SaveExploits0References4
NVD
NVD
added 2021/04/25 7:15 p.m.46 views

CVE-2021-31762

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

8.8CVSS0.0878EPSS
SaveExploits6References5
OSV
OSV
added 2021/04/25 7:15 p.m.20 views

CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

9.6CVSS6.2AI score
SaveExploits0References5
Prion
Prion
added 2021/04/25 7:15 p.m.30 views

Cross site request forgery (csrf)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

6.8CVSS9AI score0.08485EPSS
SaveExploits3References4Affected Software1
Prion
Prion
added 2021/04/25 7:15 p.m.29 views

Cross site request forgery (csrf)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

6.8CVSS8.7AI score0.0878EPSS
SaveExploits6References5Affected Software1
Prion
Prion
added 2021/04/25 7:15 p.m.19 views

Cross site scripting

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

6.8CVSS8.9AI score0.33569EPSS
SaveExploits6References5Affected Software1
Rows per page
Query Builder