CVE-2006-3392 PoC — Webmin/Usermin未明信息泄露漏洞

Source

https://github.com/Adel-kaka-dz/CVE-2006-3392

Associated Vulnerability

Title: Webmin/Usermin未明信息泄露漏洞 (CVE-2006-3392)
Description:Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.

Description

It is a simple tool to exploit local file include . vulnerabilities

Readme

It is a simple tool to exploit Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure . vulnerabilities 

How to use:

1-Run the script python exploit.py .
2-put the port .
3-Select the folder you want to view .

⛔ Important ⛔
We are not responsible for the use of this script in an unethical act

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →