CVE-2022-36446

Mô tả

Tham khảo

• packetstormsecurity.com/files/167894/Webmin-1.996-Remote-Code-Execution.html · Third Party Advisory
• packetstormsecurity.com/files/168049/Webmin-Package-Updates-Command-Injection.html · Exploit
• gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b · Exploit
• webmin/webmin commit 13f7bf9 · Patch
• webmin/webmin · Release Notes
• exploit-db.com/exploits/50998 · Third Party Advisory

Lỗ hổng khác của webmin

• CVE-2026-56022TRUNG BÌNH 5.3Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of ad…
• CVE-2026-56021TRUNG BÌNH 5.3Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable rege…
• CVE-2026-22678TRUNG BÌNH 5.4Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server St…
• CVE-2025-61541CAO 7.1Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is…
• CVE-2024-12828CAO 8.8Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…