EDB-42989

PoC

Webmin 1.850 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2017-10-15catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-15646US	medium6.1	4.81% (92nd)	Exploit	2017-10-19
Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Download from remote URL' option to download a file from a remot…
CVE-2017-15645US	high8.8	3.23% (88th)	Exploit	2017-10-19
CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrary commands.
CVE-2017-15644US	high8.6	8.93% (95th)	Exploit	2017-10-19
SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.