1378 matches found
Webmin <= 1.930 XXE
An XML external entity XXE vulnerability exists in Webmin through 1.930 in xmlrpc.cgi due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote, authenticated attacker can exploit this,via specially crafted XML data, to disclose sensitive...
Webmin < 1.970 Multiple Vulnerabilities
According to its self-reported version, the version of Webmin running on the remote host may be affected by multiple vulnerabilities, including the following: - Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary...
Webmin <= 1.941 Multiple Vulnerabilities
According to its self-reported version, the version of Webmin on the remote host is affected by multiple vulnerabilities, including the following: - An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the...
Webmin 1.890 XSS
A cross-site scripting XSS vulnerability exists in Webmin 1.890 due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's...
Webmin <= 1.910 Remote Command Execution
A remote command execution vulnerability exists in Package Updates module. An authenticated, remote attacker can exploit this if they are authorized to the Package Updates module via the data parameter to update.cgi in order to execute arbitrary commands with root privileges. C Tenable Network...
Webmin Command Injection (CVE-2020-35606; CVE-2022-36446)
A command injection vulnerability exists in Webmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Webmin < 1.970 RCE Vulnerability
miniserv.pl in Webmin on Windows mishandles special characters in query arguments to the CGI program. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Webmin Input Validation Error Vulnerability
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. An input validation error vulnerability exists in Webmin version 1.962, which stems from miniserv.pl incorrectly handling special characters in the query parameters of a CGI program, and...
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...
Code injection
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...
CVE-2020-35769
Summary: CVE-2020-35769 affects Webmin 1.962 on Windows, via miniserv.pl mishandling special characters in CGI query parameters. This has been linked to remote command execution (in-the-wild vectors reported in multiple advisories) with CVSS 3.1/2.0 vectors indicating high/critical impact. Connec...
Webmin 输入验证错误漏洞
Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. An input validation error vulnerability exists in Webmin version 1.962, which stems from miniserv.pl incorrectly handling special characters in the query parameters of a CGI program, and...
Webmin <= 1.983 RCE Vulnerability
Webmin is prone to a remote code execution RCE vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.962 - Package Update Escape Bypass RCE Metasploit', 'Description' = %q This module exploits an arbitrary command execution vulnerability...
Webmin Arbitrary Command Execution Vulnerability (CNVD-2021-07125)
Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. An arbitrary command execution vulnerability exists in Webmin 1.962 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary command...
Webmin 1.962 Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.962 - Package Update Escape Bypass RCE Metasploit', 'Description' = %q This module exploits an arbitrary command execution vulnerability...
CVE-2020-35606
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840...
CVE-2020-35606
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840...