CVE-2012-2982 PoC — Webmin ‘file/show.cgi’任意命令执行漏洞

Source

Associated Vulnerability

Readme

# CVE-2012-2982 Exploit (python)
Hello, I am a security researcher and this is my first exploit.
Webmin 1.580 has a RCE which is also CVE-2012-2982

To use This payload:
1. download
2. Open in text editor!
3. change targetIP to your target
4. change lhost to your own ip
5. change lport to the port number in which listener will run
6. And lastly {'page' : "%2F", 'user' : "user1", 'pass' : "1user"} here default user name is "user1" change it with your own and "1user is the default password change it with your own.
7. run the listener (nc -nlvp {lport})
8. run the exploit (python mal.py)

File Snapshot

 [4.0K]  /data/pocs/5795f07b1cb58707ff8d2c7b1349850c83d3efbc
├── [ 953]  mal.py
└── [ 592]  README.md

0 directories, 2 files

Remarks