CVE-2019-15642
HIGH EXPLOITED NUCLEIWebmin < 1.920 - Authenticated Remote Code Execution via unserialise_variable Eval Call
Title source: llmExploitation Summary
CVE-2019-15642 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including jas502n. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2019-15642, a remote code execution vulnerability in Webmin. The exploit leverages the RPC endpoint to execute arbitrary commands on the target system, requiring valid credentials for authentication.
Description
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users."
Exploits (1)
This repository contains a functional Python exploit for CVE-2019-15642, a remote code execution vulnerability in Webmin. The exploit leverages the RPC endpoint to execute arbitrary commands on the target system, requiring valid credentials for authentication.
Nuclei Templates (1)
title:"Webmin" || http.title:"webmin"
title="webmin"
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H