| Package | Affected versions | Patched versions |
|---|---|---|
| webmin | = 1.140= 1.150= 1.160= 1.170= 1.180= 1.200= 1.210= 1.220= 1.230= 1.240= 1.260= 1.270= 1.280= 1.290= 1.300= 1.310= 1.320= 1.330= 1.340= 1.370= 1.380= 1.390= 1.400= 1.410= 1.420= 1.430= 1.440= 1.450= 1.470= 1.480= 1.500= 1.510= 1.520= 1.530= 1.550= 1.560= 1.570= 1.580≤ 1.590 |
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free