jas502n/CVE-2019-15642

PoC

Webmin Remote Code Execution (authenticated)

view exploit source poc_in_githubauthor jas502npublished 2019-09-01catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-15642UShigh8.8Exploit
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan