Security Research

CVE-2019-15107 Webmin Unauthenticated RCE: command injection in password_change.cgi

Thinking 2019-08-28 5 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Webmin old password check command injection

Webmin’s password_change.cgi does not filter the old parameter when passwd_mode=2 is set, letting unauthenticated attackers inject a pipe into the unix_crypt shell path and execute arbitrary commands.

Unlock to view this content.