1378 matches found
Input validation
An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered however, JavaScript is...
CVE-2020-12670
XSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module / mailboxes Endpoint when attempting to save HTML emails. This module parses any output without sanitizing SCRIPT elements, as opposed to the View function, which sanitizes the input correctly. A...
CVE-2020-12670
CVE-2020-12670 affects Webmin 1.941 and earlier. The vulnerability is a cross-site scripting flaw in the Save function of the Read User Email Module / mailboxes Endpoint, where output is parsed without sanitizing SCRIPT elements, unlike the View function which sanitizes input. A malicious user ca...
CVE-2020-8821
An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered however, JavaScript is...
CVE-2020-8821
Affected software: Webmin 1.941 and earlier. Root cause: Improper data validation in the Command Shell Endpoint allows HTML to be submitted in the Command field; HTML is rendered in Action Logs and across users, with no JavaScript execution. Impact: HTML rendering in logs and cross-user persisten...
CVE-2020-8820
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed...
CVE-2020-8820
CVE-2020-8820 corresponds to an XSS vulnerability in Webmin 1.941 and earlier, affecting the Cluster Shell Commands Endpoint. The vulnerability allows a user to input an XSS payload in the Command field, which is executed after revisiting the Cluster Shell Commands Menu. Connected sources consist...
Exploit for OS Command Injection in Webmin
Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin ve...
Exploit for OS Command Injection in Webmin
CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your...
Exploit for OS Command Injection in Webmin
CVE-2019-15107 Make sure to manually...
Exploit for CVE-2019-15231
This repository contains a collection of exploits for various vulnerabilities, including unauthenticated remote command execution RCE and directory traversal. The exploits are written in Python and utilize various libraries such as requests and pymongo. The repository includes exploits for the...
Exploit for OS Command Injection in Webmin
webminex poc exploit for webmin...
The vulnerability of the Webmin control panel in hosting services, related to deficiencies in access control, allows attackers to execute arbitrary code.
The vulnerability of the Webmin control panel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created .cgi file through the URI /updown/upload.cgi from a remote location...
VulnCheck KEV: CVE-2019-15107
An issue was discovered in Webmin. The parameter old in passwordchange.cgi contains a command injection vulnerability...
Linux Webmin Servers Under Attack by Roboto P2P Botnet
Vulnerable Linux Webmin servers are under active attack by a newly-discovered peer-to-peer P2P botnet, dubbed Roboto by researchers. The botnet is targeting a remote code-execution vulnerability CVE-2019-15107 in Webmin, a web-based system configuration tool for Linux servers. CVE-2019-15107 was...
Exploit for OS Command Injection in Webmin
webmincve-2019-12840poc A standalone POC for CVE-2019-12840...
Exploit for OS Command Injection in Webmin
CVE-2019-12840POC PoC for Webmin Package Update Au...
Exploit for OS Command Injection in Webmin
CVE-2019-15107: Exploit Modules Available for Remote Code Exe...
Exploit for OS Command Injection in Webmin
It is an exploit module for CVE-2019-15107, a vulnerability in Webmin. The target product/service is Webmin, a web-based interface for system administration. The vulnerability class/vector is a remote command execution RCE vulnerability. The probable entry point is the "passwordchange.cgi" script...