CVE-2022-0824

Description

References

• packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html · Exploit
• webmin/webmin commit 39ea464 · Patch
• huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295 · Exploit
• notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html · Exploit

webmin의 다른 취약점

• CVE-2026-56022보통 5.3Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of ad…
• CVE-2026-56021보통 5.3Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable rege…
• CVE-2026-22678보통 5.4Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server St…
• CVE-2025-61541높음 7.1Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is…
• CVE-2024-12828높음 8.8Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…