CVE-2012-2983
Webmin < 1.590 - Unauthenticated Arbitrary File Read via file/edit_html.cgi
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-2983.
PoCs published by Unknown, juan vazquez, including Metasploit module auxiliary/admin/webmin/edit_html_fileaccess.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Webmin 1.580 via the edit_html.cgi component, allowing authenticated users to access arbitrary files with root privileges. It authenticates with provided credentials and retrieves the specified file using path traversal techniques.
Description
file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
Exploits (1)
This Metasploit module exploits a directory traversal vulnerability in Webmin 1.580 via the edit_html.cgi component, allowing authenticated users to access arbitrary files with root privileges. It authenticates with provided credentials and retrieves the specified file using path traversal techniques.