Search the Community

Webmin version 1.920 remote code execution exploit that leverages the vulnerability noted in CVE-2019-15107. View the full article

This Metasploit module exploits Webmin versions 1.930 and below. This exploit takes advantage of a code execution issue within the function unserialise_variable() located in web-lib-funcs.pl, in order to gain root. The only prerequisite is a valid session id. View the full article

Webmin version 1.920 remote root exploit. View the full article

This Metasploit module exploits an arbitrary command execution vulnerability in Webmin versions 1.920 and below. If the password change module is turned on, the unauthenticated user can execute arbitrary commands with root privileges. View the full article