CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-08-16
Webmin password_change.cgi Unauthenticated Remote Command Execution (RCE) (CVE-2019-15107)
[Affected Scope] Webmin versions 1.920 and prior (with password change feature enabled)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP POST request.
[Mitigation] Immediately upgrade Webmin to the latest secure version (1.930 or higher) or disable the password_change.cgi script.