CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

CVE-2021-31762

CVE-2021-31762 affects Webmin 1.973 and is a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to create a privileged user via Webmin’s Add Users feature and, via Webmin’s Run Process feature, obtain a reverse shell. The connected sources confirm the vulnerability leads to ...

CVE-2021-31762

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

CVE-2021-31761

Summary: CVE-2021-31761 affects Webmin 1.973, exposing a reflected XSS that enables Remote Command Execution through Webmin’s “running process” feature. Connected sources confirm the vulnerability class (reflected XSS) and RCE impact, and provide evidence of exploitation attempts (e.g., CSRF/XSS ...

CVE-2021-31761

Webmin 1.973 is affected by reflected Cross Site Scripting XSS to achieve Remote Command Execution through Webmin's running process feature...

CVE-2021-31760

CVE-2021-31760 affects Webmin 1.973. Several connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability that can achieve Remote Command Execution (RCE) via Webmin’s “running process” feature. Exploitation is described in multiple entries (NVD/OSV/Red Hat/CNNVD) with Webmin 1.973 ...

CVE-2021-31760

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to achieve Remote Command Execution RCE through Webmin's running process feature...

Webmin 跨站请求伪造漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin's ru...

Webmin 跨站脚本漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A reflective cross-site scripting vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin...

Webmin 跨站请求伪造漏洞

Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. An attacker can use this vulnerability to create an elevated privilege user via Webmin...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploit...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31762 |.. Description : Exploiting a Cross-sit...

Exploit for Cross-site Scripting in Webmin

CVE-2021-31761 Description : Exploiting a Reflected Cross-S...

Exploit for Cross-site Scripting in Webmin

..| CVE-2021-31761 |.. Description : Exploiting a Reflected...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31760 |.. Description : Exploiting a Cross-sit...

Exploit for Cross-Site Request Forgery (CSRF) in Webmin

..| CVE-2021-31760 |.. Description : Exploiting a Cross-sit...

Webmin Command Injection (CVE-2019-12840)

A command injection vulnerability exists in Webmin . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-3149

On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manualping.cgi allows OS command injection after authentication by the attacker because the system C library function is used unsafely...

CVE-2021-3149

CVE-2021-3149 affects Netshield NANO 25 devices running 10.2.18. The issue is an OS command injection via /usr/local/webmin/System/manual_ping.cgi after authentication, caused by unsafe use of a C library function. Public documents in the set confirm affected product, vulnerable component/file, a...

Webmin 1.840 / 1.880 LFI

A local file inclusion vulnerability exists in Webmin 1.840 and 1.880 when the default Yes setting of 'Can view any file as a log file' is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to...