CVE-2019-15107

Related Files

Webmin 1.920 Remote Code Execution

Posted Sep 15, 2019

Authored by BoSSaLiNiE

Webmin version 1.920 remote code execution exploit that leverages the vulnerability noted in CVE-2019-15107.

tags | exploit, remote, code execution

advisories | CVE-2019-15107

SHA-256 | 233192a3d19175ea1314a59b24a433a47278e7d0fd3f5a72f4fdeb8334763b0e

Download | Favorite | View

Webmin 1.920 password_change.cgi Backdoor

Posted Aug 23, 2019

Authored by wvu | Site metasploit.com

This Metasploit module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attacker(s) inserted Perl qx statements into the build server's source code on two separate occasions: once in April 2018, introducing the backdoor in the 1.890 release, and in July 2018, reintroducing the backdoor in releases 1.900 through 1.920. Only version 1.890 is exploitable in the default install. Later affected versions require the expired password changing feature to be enabled.

tags | exploit, perl

advisories | CVE-2019-15107

SHA-256 | a77b36da3b341bc12695770cadbf155d839a3d53526172e82c4c2022be857299

Download | Favorite | View

Webmin 1.920 Remote Command Execution

Posted Aug 19, 2019

Authored by Zerial

Webmin unauthenticated remote command execution exploit that identifies whether or not a target is vulnerable.

tags | exploit, remote

advisories | CVE-2019-15107

SHA-256 | 971076293bd447b89480caa6102ab463befa5dda10bc69b8d76aee1339d399d8

Download | Favorite | View