CVE-2019-9624

This is a functional exploit for CVE-2019-9624, an authenticated RCE vulnerability in Webmin 1.900. It leverages multipart/form-data encoding to bypass input restrictions and execute arbitrary commands via the shell module.

This Metasploit module exploits a command injection vulnerability in Webmin 1.900 and earlier versions by uploading a malicious CGI file to execute arbitrary commands with root privileges. It requires valid credentials and access to specific Webmin modules.

This Metasploit module exploits an authenticated RCE vulnerability in Webmin 1.900 and earlier by uploading a malicious Perl script via the 'Upload and Download' module, then executing it with root privileges.