CVE-2021-31761
CRITICALWebmin 1.973 - Reflected Cross-Site Scripting to Remote Command Execution via Running Process Feature
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-31761. PoCs published by Mesh3l_911, Mesh3l911, electronicbots.
AI-analyzed exploit summary This exploit leverages a CSRF vulnerability in Webmin 1.973 to execute arbitrary commands via the 'run.cgi' endpoint. It generates a malicious HTML page that submits a form to execute a reverse shell payload when visited by an authenticated admin.
Description
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.
Exploits (3)
This exploit leverages a CSRF vulnerability in Webmin 1.973 to execute arbitrary commands via the 'run.cgi' endpoint. It generates a malicious HTML page that submits a form to execute a reverse shell payload when visited by an authenticated admin.
This repository contains a functional exploit for CVE-2021-31761, which leverages a reflected XSS vulnerability in Webmin to achieve remote command execution (RCE). The exploit generates a malicious link that, when clicked by an authenticated Webmin admin, executes a reverse shell payload via CSRF.
This repository contains a functional exploit for CVE-2021-31761, which leverages a reflected XSS vulnerability in Webmin to achieve remote command execution (RCE). The exploit generates a malicious link that, when clicked by an authenticated Webmin admin, triggers a reverse shell.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H