PT-2019-2989 · Webmin · Webmin

Akkus + 1 · Published 2019-08-16 · Updated 2025-07-24 · CVE-2019-15107

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webmin versions 1.882 through 1.921

Description The issue is related to a command injection vulnerability in the password change.cgi component of Webmin. This vulnerability allows a remote attacker to execute arbitrary code on the target system by sending a malicious POST request. The old parameter in password change.cgi contains a command injection vulnerability. The exploitation of this vulnerability may allow an attacker to gain access to the system with root privileges.

Recommendations For Webmin versions 1.882 through 1.921, update to a version later than 1.921 to resolve the issue. As a temporary workaround, consider restricting access to the password change.cgi component to minimize the risk of exploitation. Avoid using the old parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2019-02968

CVE-2019-15107

MGASA-2019-0237

Affected Products

Webmin

References · 51

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_backdoor.rb · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-15107 · Exploit
• 🔥 https://github.com/MuirlandOracle/CVE-2019-15107 · Exploit
• 🔥 https://github.com/hannob/webminex · Exploit
• 🔥 https://github.com/ruthvikvegunta/CVE-2019-15107 · Exploit
• 🔥 https://github.com/AdministratorGithub/CVE-2019-15107 · Exploit
• 🔥 https://github.com/AleWong/WebminRCE-EXP-CVE-2019-15107- · Exploit
• 🔥 https://github.com/n0obit4/Webmin_1.890-POC · Exploit
• 🔥 https://github.com/K3ysTr0K3R/CVE-2019-15107-EXPLOIT · Exploit
• 🔥 https://github.com/Rayferrufino/Make-and-Break · Exploit
• 🔥 https://github.com/HACHp1/webmin_docker_and_exp · Exploit
• 🔥 https://exploit-db.com/exploits/47293 · Exploit
• 🔥 http://packetstormsecurity.com/files/154197/Webmin-1.920-password_change.cgi-Backdoor.html · Exploit
• 🔥 http://packetstormsecurity.com/files/154141/Webmin-1.920-Remote-Command-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/154141/Webmin-Remote-Comman-Execution.html · Exploit