CVE-2012-2982
Webmin < 1.590 - Authenticated Remote Command Execution via Invalid Pathname Character
Title source: llmExploitation Summary
EIP tracks 20 public exploits for CVE-2012-2982.
PoCs published by Metasploit, JohnHammond, cd6629, including Metasploit module exploits/unix/webapp/webmin_show_cgi_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-2982, a command injection vulnerability in Webmin 1.580's /file/show.cgi component, allowing authenticated users to execute arbitrary commands with root privileges.
Description
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Exploits (20)
This Metasploit module exploits CVE-2012-2982, a command injection vulnerability in Webmin 1.580's /file/show.cgi component, allowing authenticated users to execute arbitrary commands with root privileges.
This Python script exploits CVE-2012-2982, a command injection vulnerability in Webmin 1.580 via the `/file/show.cgi` endpoint. It authenticates with provided credentials and executes arbitrary commands by injecting them into the file path parameter.
This repository contains a Python-based PoC for CVE-2012-2982, a vulnerability in Webmin that allows remote command execution. The exploit authenticates with hardcoded credentials, then leverages invalid characters in a file path to execute arbitrary commands, resulting in a reverse shell.
This is a Rust-based PoC exploit for CVE-2012-2982, targeting an RCE vulnerability in Webmin versions 1.140 to 1.590. It leverages improper input sanitization in the show.cgi component to execute arbitrary commands via a pipe character in the URL path.
This Python script exploits CVE-2012-2982 in Webmin 1.580, leveraging a command injection vulnerability in the /file/show.cgi component to execute arbitrary commands with root privileges. It authenticates with provided credentials and delivers a reverse shell payload.
This PoC exploits CVE-2012-2982, a command injection vulnerability in Webmin's file show functionality. It authenticates, then injects a reverse shell payload via a crafted request to the vulnerable endpoint.
This repository provides a functional exploit for CVE-2012-2982, demonstrating authenticated remote command execution in Webmin 1.580 via the `/file/show.cgi` component. The exploit leverages insufficient sanitization of the path parameter to inject a reverse shell payload.
This is a functional Python PoC for CVE-2012-2982, exploiting an authenticated RCE vulnerability in Webmin 1.580 via improper input sanitization in the file/show.cgi component. It logs in, crafts a malicious URL with command injection, and executes arbitrary commands as root.
This is a partial PoC for CVE-2012-2982, demonstrating a login mechanism but lacking exploit logic. It sends credentials to a target URL but does not exploit the vulnerability.
This repository contains a Python exploit script for CVE-2012-2982, targeting a remote code execution vulnerability in Webmin <= 1.580 via the `/file/show.cgi/bin/` endpoint. The exploit leverages authenticated shell command injection to execute a reverse shell payload.
This PoC exploits a command injection vulnerability in the target software by authenticating and then injecting a reverse shell payload via a crafted URL. It uses a session cookie to maintain authentication and executes arbitrary commands.
This is a functional Python exploit for CVE-2012-2982, targeting Webmin 1.590 and earlier. It leverages improper input sanitization in the /file/show.cgi endpoint to execute arbitrary commands via shell metacharacter injection.
This PoC exploits CVE-2012-2982, a command injection vulnerability in the Webmin file manager. It authenticates to the target, then injects a reverse shell payload via the 'show.cgi' endpoint.
This exploit targets CVE-2012-2982 in Webmin 1.580, leveraging a command injection vulnerability in the 'file/show.cgi' endpoint to achieve remote code execution. It authenticates with hardcoded credentials, then sends a reverse shell payload via a crafted request.
This repository contains a working exploit for CVE-2012-2982, a command injection vulnerability in Webmin 1.590 and earlier. The exploit leverages an invalid character in a pathname to execute arbitrary commands, resulting in a reverse shell.
This PoC exploits CVE-2012-2982, a command injection vulnerability in Webmin's /file/show.cgi endpoint. It authenticates with provided credentials, then sends a malicious payload to execute a reverse shell via a crafted request.
This is a functional exploit for CVE-2012-2982, targeting a command injection vulnerability in Webmin's file show.cgi. It authenticates, extracts a session ID, and executes arbitrary commands via URL-encoded payloads.
This is a Python-based exploit for CVE-2012-2982, targeting Webmin 1.580. It leverages a command injection vulnerability in the 'file/show.cgi' endpoint to achieve remote code execution (RCE) via a reverse shell.
This exploit targets CVE-2012-2982, a remote code execution vulnerability in Webmin 1.580. It authenticates with provided credentials and injects a command via a crafted URL path in the file/show.cgi endpoint.
This Metasploit module exploits a command injection vulnerability in Webmin 1.580 via the /file/show.cgi endpoint, allowing authenticated users to execute arbitrary commands with root privileges.