Логотип exploitDog
bind: "CVE-2024-12828"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2024-12828"

Количество 6

Количество 6

ubuntu логотип

CVE-2024-12828

больше 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Средний
nvd логотип

CVE-2024-12828

больше 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Средний
debian логотип

CVE-2024-12828

больше 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
EPSS: Средний
github логотип

GHSA-r6m7-83vq-qx32

больше 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
EPSS: Средний
fstec логотип

BDU:2024-11622

около 2 лет назад

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
EPSS: Средний
redos логотип

ROS-20251028-01

5 месяцев назад

Уязвимость webmin

CVSS3: 9.9
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
22%
Средний
больше 1 года назад
nvd логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
22%
Средний
больше 1 года назад
debian логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
22%
Средний
больше 1 года назад
github логотип
GHSA-r6m7-83vq-qx32

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
22%
Средний
больше 1 года назад
fstec логотип
BDU:2024-11622

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
22%
Средний
около 2 лет назад
redos логотип
ROS-20251028-01

Уязвимость webmin

CVSS3: 9.9
22%
Средний
5 месяцев назад

Уязвимостей на страницу