Логотип exploitDog
bind:CVE-2024-12828
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-12828

Количество 6

Количество 6

ubuntu логотип

CVE-2024-12828

11 месяцев назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-12828

11 месяцев назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-12828

11 месяцев назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-r6m7-83vq-qx32

11 месяцев назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
EPSS: Низкий
fstec логотип

BDU:2024-11622

больше 1 года назад

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
EPSS: Низкий
redos логотип

ROS-20251028-01

около 1 месяца назад

Уязвимость webmin

CVSS3: 9.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
2%
Низкий
11 месяцев назад
nvd логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
2%
Низкий
11 месяцев назад
debian логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
2%
Низкий
11 месяцев назад
github логотип
GHSA-r6m7-83vq-qx32

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
2%
Низкий
11 месяцев назад
fstec логотип
BDU:2024-11622

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
2%
Низкий
больше 1 года назад
redos логотип
ROS-20251028-01

Уязвимость webmin

CVSS3: 9.9
2%
Низкий
около 1 месяца назад

Уязвимостей на страницу