Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtualmin or Cloudmin). This occurs because settings-editor_write.cgi does not properly restrict the file parameter.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Webmin 安全漏洞
Vulnerability Description
Webmin是Webmin社区的一套基于Web的用于类Unix操作系统中的系统管理工具。 Webmin 1.991版本及之前版本存在安全漏洞，该漏洞源于settings-editor_write.cgi 没有正确限制文件参数，导致在手动创建用户（即，未在 Virtualmin 或 Cloudmin 中创建）时远程执行代码。
CVSS Information
N/A
Vulnerability Type
N/A