EDB-49318

functional

Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)

view exploit source exploit_dbverifiedtype webappsauthor AkkuSpublished 2020-12-22catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-35606UShigh8.8Exploit
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors in…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan