CVE-2019-12840 PoC — Webmin 操作系统命令注入漏洞

Source

https://github.com/bkaraceylan/CVE-2019-12840_POC

Associated Vulnerability

Title:Webmin 操作系统命令注入漏洞 (CVE-2019-12840)
Description:In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.

Description

PoC for Webmin Package Update Authenticated Remote Command Execution

Readme

# CVE-2019-12840_POC
PoC for Webmin Package Update Authenticated Remote Command Execution

An alternative to the metasploit module.

All credit goes to Özkan Mustafa Akkuş
https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!