Логотип exploitDog
bind: "CVE-2024-12828"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-12828"

Количество 6

Количество 6

ubuntu логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-r6m7-83vq-qx32

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
EPSS: Низкий
fstec логотип

BDU:2024-11622

почти 2 года назад

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
EPSS: Низкий
redos логотип

ROS-20251028-01

3 месяца назад

Уязвимость webmin

CVSS3: 9.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
2%
Низкий
около 1 года назад
nvd логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
2%
Низкий
около 1 года назад
debian логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
2%
Низкий
около 1 года назад
github логотип
GHSA-r6m7-83vq-qx32

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
2%
Низкий
около 1 года назад
fstec логотип
BDU:2024-11622

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
2%
Низкий
почти 2 года назад
redos логотип
ROS-20251028-01

Уязвимость webmin

CVSS3: 9.9
2%
Низкий
3 месяца назад

Уязвимостей на страницу