CVEs-PoC/2012/CVE-2012-2982.md

CVE-2012-2982

Description

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

POC

Reference

• http://www.kb.cert.org/vuls/id/788478
• 1f1411fe74

Github

• https://github.com/0xF331-D3AD/CVE-2012-2982
• https://github.com/0xTas/CVE-2012-2982
• https://github.com/ARPSyndicate/cvemon
• https://github.com/AlexJS6/CVE-2012-2982_Python
• https://github.com/Ari-Weinberg/CVE-2012-2982
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CpyRe/CVE-2012-2982
• https://github.com/Dawnn3619/CVE-2012-2982
• https://github.com/Gvmyz/CVE-2012-2982_Python
• https://github.com/Hackgodybj/Webmin_RCE_version-1.580
• https://github.com/JohnHammond/CVE-2012-2982
• https://github.com/LeDucKhiem/CVE-2012-2982
• https://github.com/Mithlonde/Mithlonde
• https://github.com/OstojaOfficial/CVE-2012-2982
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/R00tendo/CVE-2012-2982
• https://github.com/Shadow-Spinner/CVE-2012-2982_python
• https://github.com/SieGer05/CVE-2012-2982-Webmin-Exploit
• https://github.com/SincIDK/CVE-2012-2982-Exploit-Script
• https://github.com/SlizBinksman/CVE_2012-2982
• https://github.com/SpoofIMEI/CVE-2012-2982
• https://github.com/Will-Banksy/My-Exploits
• https://github.com/alien-keric/webmin-v1.580-exploit
• https://github.com/blu3ming/CVE-2012-2982
• https://github.com/boriitoo/CVE-2012-2982
• https://github.com/boritopalito/CVE-2012-2982
• https://github.com/cd6629/CVE-2012-2982-Python-PoC
• https://github.com/elliotosama/CVE-2012-2982
• https://github.com/hackedrishi/Intro-PoC-Scripting-THM-WriteUp
• https://github.com/kirilla/python
• https://github.com/lpuv/CVE-2012-2982
• https://github.com/n0-traces/cve_monitor
• https://github.com/tera-si/PoC-scripts-in-GO
• https://github.com/varppi/CVE-2012-2982
• https://github.com/wizardy0ga/CVE_2012-2982
• https://github.com/yembors64632/cve_monitor_Public