Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-12840 PoC — Webmin 操作系统命令注入漏洞

Source
https://github.com/zAbuQasem/CVE-2019-12840
Associated Vulnerability
Title:Webmin 操作系统命令注入漏洞 (CVE-2019-12840)
Description:In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.
Description
CVE-2019-12840
Readme
# CVE-2019-12840
Authenticated RCE in Webmin 1.910 - 'Package Updates'

Usage : 

1-setup a netcat listener.

2- python3 exploit.py 

Notes:

Provide the url for example: http://<ip>:port

Please copy 'sid' cookie from your browser and supply it for the exploit to work...
File Snapshot

 [4.0K]  /data/pocs/da04e47da5d13d486e3ec66393be8d960ea3da28
├── [1.3K]  exploit.py
└── [ 273]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →