CVE-2019-15107 PoC — Webmin 命令操作系统命令注入漏洞

Source

https://github.com/lolminerxmrig/CVE-2019-15107

Associated Vulnerability

Title:Webmin 命令操作系统命令注入漏洞 (CVE-2019-15107)
Description:An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Description

Python3 code to exploit CVE-2019-15107 and CVE-2019-15231

Readme

#  Webmin v1.920 < v1.890 RCE
 
Python3 code to exploit **CVE-2019-15107** and **CVE-2019-15231** , the version of Webmin affected are versions 1.890 through 1.920.

# How to install ?

```bash
# Dependencies :
pip3 install termcolor argparse

# Git cloning
git clone https://github.com/NullBrunk/CVE-2019-15107/
cd CVE-2019-15107 && chmod +x exploit.py

# Launch
./exploit.py --help

```

# How to use it ?

## help :

![Capture d'écran Deepin_zone de sélection _20220612173318](https://user-images.githubusercontent.com/106782577/173241398-debc5c7c-0968-4cae-98e7-0cc0d03a3cf2.png)

## exploit :

![Capture d'écran Deepin_zone de sélection _20220612174043](https://user-images.githubusercontent.com/106782577/173241415-794ea412-3844-4c1e-8a7e-6b3ab926f97b.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!