漏洞描述
Webmin存在命令注入漏洞，该漏洞是由于对软件包更新模块对输入验证不足造成的。
Webmin Package Updates update.cgi命令注入漏洞
PoC代码
暂无相关漏洞推荐
- mJobtime /Default.aspx/update_profile_Server 命令执行漏洞（CVE-2025-51683）
- Webmin /package-updates/update.cgi 命令执行漏洞（CVE-2022-36446）
- CVE-2019-15107: Webmin <= 1.920 Unauthenticated Remote Command Execution
- esafenet-cdgserver3-updateclientstatus-rce: 亿赛通电子文档系统 UpdateClientStatus RCE
- 亿赛通 /CDGServer3/workflowE/useractivate/update.jsp SQL 注入漏洞
- POC CVE-2019-15107: Webmin <= 1.920 - Unauthenticated Remote Command Execution
- POC CVE-2019-15642: Webmin < 1.920 - Authenticated Remote Code Execution
- POC CVE-2021-28918: Netmask NPM Package - Server-Side Request Forgery
- POC CVE-2022-0824: Webmin <1.990 - Improper Access Control
- POC CVE-2022-36446: Webmin <1.997 - Authenticated Remote Code Execution
- POC CVE-2024-8698: Keycloak - SAML Core Package Signature Validation Flaw
- POC azure-keyvault-update-unalerted: Azure Key Vault Update Alert Not Configured
- POC azure-lb-create-update-missing: Azure Load Balancer Create or Update Alert Not Configured