.. / CVE-2019-15107

• RCE
• Nuclei
• Web

Exploit for Webmin <= 1.920 - Unauthenticated Remote Command Execution (CVE-2019-15107)

Description:

Webmin <=1.920. is vulnerable to an unauthenticated remote command execution via the parameter ‘old’ in password_change.cgi.

Nuclei Template

View the template here CVE-2019-15107.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-15107.yaml

References: