CVE-2022-36446

This exploit targets CVE-2022-36446 in Webmin versions < 1.997, leveraging authenticated RCE via command injection in the package-updates module. It establishes a reverse shell by injecting a Python payload into the 'u' parameter.

This repository contains a functional Python exploit for CVE-2022-36446, an authenticated RCE vulnerability in Webmin's Software Package Updates feature. The exploit leverages command injection via the 'u' parameter in the update.cgi endpoint to execute arbitrary commands on the target system.

This repository contains a functional Python exploit for CVE-2022-36446, demonstrating authenticated remote code execution in Webmin versions < 1.997 via command injection in the 'Software Package Updates' module. The exploit includes a reverse shell payload and detailed HTTP request formatting.

This repository contains a functional Python exploit for CVE-2022-36446, an authenticated remote code execution vulnerability in Webmin versions prior to 1.997. The exploit leverages command injection in the Software Package Updates feature to execute arbitrary commands on the target system.

This Metasploit module exploits a command injection vulnerability in Webmin's package update functionality (CVE-2022-36446) by injecting arbitrary commands via the 'u' parameter in the update.cgi endpoint. It supports multiple payload types and requires authentication.