CVE-2019-15107 PoC — Webmin 命令操作系统命令注入漏洞

Source

Associated Vulnerability

Description

Python3 code to exploit CVE-2019-15107 and CVE-2019-15231 

Readme

#  Webmin v1.920 < v1.890 RCE
 
Python3 code to exploit **CVE-2019-15107** and **CVE-2019-15231** , the version of Webmin affected are versions 1.890 through 1.920.

# How to install ?

```bash
# Dependencies :
pip3 install termcolor argparse

# Git cloning
git clone https://github.com/NullBrunk/CVE-2019-15107/
cd CVE-2019-15107 && chmod +x exploit.py

# Launch
./exploit.py --help

```

# How to use it ?

## help :

![Capture d'écran Deepin_zone de sélection _20220612173318](https://user-images.githubusercontent.com/106782577/173241398-debc5c7c-0968-4cae-98e7-0cc0d03a3cf2.png)

## exploit :

![Capture d'écran Deepin_zone de sélection _20220612174043](https://user-images.githubusercontent.com/106782577/173241415-794ea412-3844-4c1e-8a7e-6b3ab926f97b.png)

File Snapshot

 [4.0K]  /data/pocs/c1282c81512044bedc447c63b9ed1e39dc287417
├── [2.5K]  exploit.py
└── [ 767]  README.md

0 directories, 2 files

Remarks