1378 matches found
CVE-2019-15107
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...
CVE-2019-15107
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...
Command injection
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...
CVE-2019-15107
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...
CVE-2019-15107
Webmin vulnerability CVE-2019-15107 affects Webmin
CVE-2019-15107
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability...
Webmin password_change.cgi Command Injection
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability. Recent assessments: wvu-r7 at August 21, 2019 3:12am UTC reported: This was a supply chain attack: http://www.webmin.com/exploit.html. The backdoor was introduced in a...
PT-2019-2989 · Webmin · Webmin
Name of the Vulnerable Software and Affected Versions: Webmin versions 1.882 through 1.921 Webmin versions 1.890 through 1.920 Webmin versions prior to 1.930 Description: A backdoor was discovered in Webmin, a web-based system administration interface for UNIX-like operating systems. The backdoor...
CVE-2019-15107
An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Webmin Command Injection Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. A command injection vulnerability exists in Webmin. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during the construction of...
Webmin 1.920 - Unauthenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.920 Unauthenticated RCE', 'Description' = %q This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForg...
Webmin 1.920 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.920 Unauthenticated RCE', 'Description' = %q This module exploits an arbitrary command execution vulnerability in Webmin 1.920 and prior...
Webmin 1.920 - Unauthenticated Remote Code Execution (Metasploit)
Webmin 1.920 - Unauthenticated Remote Code Execution Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.920 Unauthenticated RCE', 'Description' = %q This module exploits a...
Webmin 1.920 - Unauthenticated Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin 1.920 Unauthenticated RCE', 'Description' = %q This module exploits an arbitrary command execution vulnerability in Webmin 1.920 and prior...
Webmin password_change.cgi Backdoor
This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attackers inserted Perl qx statements into the build server's source code on two separate occasions: onc...
Webmin Arbitrary Command Execution Vulnerability
Webmin is a set of Web-based system management tools for Unix-like operating systems. A security vulnerability exists in Webmin versions 1.910 and earlier. The vulnerability can be exploited to execute arbitrary commands with root privileges by sending the 'data' parameter to the update.cgi file...
Webmin <= 1.941 RCE Vulnerability
Webmin is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Command injection
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi...