Command Execution Vulnerability in Webmin by Cloudmin
CVE-2012-2982
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 84%
What is CVE-2012-2982?
A vulnerability exists in Webmin 1.590 and earlier versions that allows remote authenticated users to execute arbitrary commands due to a flaw in handling pathnames. Specifically, an invalid character, such as the pipe (|) character, can be used to manipulate command execution, leading to unauthorized access and potential system compromise. This issue underscores the importance of secure coding practices and proper input validation to prevent exploitation through unauthorized command execution.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.