Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2012-2982 PoC — Webmin ‘file/show.cgi’任意命令执行漏洞

Source
Associated Vulnerability
Title:Webmin ‘file/show.cgi’任意命令执行漏洞 (CVE-2012-2982)
Description:file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Description
PoC Python script as an exercice from tryhackme.
Readme
# CVE-2012-2982_Python
PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting    
This is the metasploit CVE: https://www.exploit-db.com/exploits/21851   
Those are the changes done after the discovery of the Exploit: https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213    

---- 

### How to use:   
clone to repo, and then look at the script to see what you need to change.    

![exploit](assets/screen.png)
File Snapshot

[4.0K] /data/pocs/e8f155ef617835c8d84cae9a2fd8f24e3b676a57 ├── [4.0K] assets │   └── [142K] screen.png ├── [1.0K] exploit.py └── [ 478] README.md 1 directory, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →