Логотип exploitDog
bind:CVE-2024-12828
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-12828

Количество 6

Количество 6

ubuntu логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Средний
nvd логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
EPSS: Средний
debian логотип

CVE-2024-12828

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
EPSS: Средний
github логотип

GHSA-r6m7-83vq-qx32

около 1 года назад

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
EPSS: Средний
fstec логотип

BDU:2024-11622

почти 2 года назад

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
EPSS: Средний
redos логотип

ROS-20251028-01

3 месяца назад

Уязвимость webmin

CVSS3: 9.9
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
22%
Средний
около 1 года назад
nvd логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 8.8
22%
Средний
около 1 года назад
debian логотип
CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability. This ...

CVSS3: 8.8
22%
Средний
около 1 года назад
github логотип
GHSA-r6m7-83vq-qx32

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346.

CVSS3: 9.9
22%
Средний
около 1 года назад
fstec логотип
BDU:2024-11622

Уязвимость обработчика CGI-запросов панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный код с root-привилегиями

CVSS3: 9.9
22%
Средний
почти 2 года назад
redos логотип
ROS-20251028-01

Уязвимость webmin

CVSS3: 9.9
22%
Средний
3 месяца назад

Уязвимостей на страницу