CVEs-PoC/2019/CVE-2019-15107.md

CVE-2019-15107

Description

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

POC

Reference

• http://packetstormsecurity.com/files/154141/Webmin-1.920-Remote-Command-Execution.html
• http://packetstormsecurity.com/files/154141/Webmin-Remote-Comman-Execution.html
• http://packetstormsecurity.com/files/154197/Webmin-1.920-password_change.cgi-Backdoor.html
• http://packetstormsecurity.com/files/154485/Webmin-1.920-Remote-Code-Execution.html
• http://www.pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html
• https://attackerkb.com/topics/hxx3zmiCkR/webmin-password-change-cgi-command-injection
• https://www.exploit-db.com/exploits/47230

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0x4r2/Webmin-CVE-2019-15107
• https://github.com/0xT11/CVE-POC
• https://github.com/0xaniketB/TryHackMe-Wreath
• https://github.com/20142995/Goby
• https://github.com/3gstudent/Homework-of-Python
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AdministratorGithub/CVE-2019-15107
• https://github.com/AleWong/WebminRCE-EXP-CVE-2019-15107-
• https://github.com/AustinStitz-Hacking/HackABit-Writeups
• https://github.com/Awrrays/FrameVul
• https://github.com/CLincat/vulcat
• https://github.com/ChakoMoonFish/webmin_CVE-2019-15107
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/HACHp1/webmin_docker_and_exp
• https://github.com/HaleBera/A-NOVEL-CONTAINER-ATTACKS-DATASET-FOR-INTRUSION-DETECTION
• https://github.com/HaleBera/A-NOVEL-CONTAINER-ATTACKS-DATASET-FOR-INTRUSION-DETECTION-Deployments
• https://github.com/HattMobb/Wreath-Network-Pen-Test
• https://github.com/HimmelAward/Goby_POC
• https://github.com/InesMartins31/iot-cves
• https://github.com/K3ysTr0K3R/CVE-2019-15107-EXPLOIT
• https://github.com/K3ysTr0K3R/K3ysTr0K3R
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/MajortomVR/exploits
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/MuirlandOracle/CVE-2019-15107
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Pichuuuuu/CVE-2019-15107
• https://github.com/Pichuuuuu/verbose_happiness
• https://github.com/Rayferrufino/Make-and-Break
• https://github.com/SexyBeast233/SecBooks
• https://github.com/SlizBinksman/THM-Source-CVE-2019-15231
• https://github.com/SpiritixCS/ToolBox
• https://github.com/TheAlpha19/MiniExploit
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/TrojanAZhen/Self_Back
• https://github.com/Tuz-Wwsd/CVE-2019-15107_detection
• https://github.com/Tyro-Shan/gongkaishouji
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/YeezyTaughtMe1/HTB-Postman
• https://github.com/Z0fhack/Goby_POC
• https://github.com/ZTK-009/Penetration_PoC
• https://github.com/ZTK-009/RedTeamer
• https://github.com/aamfrk/Webmin-CVE-2019-15107
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/cckuailong/vultarget_web
• https://github.com/cd6629/Python-scripts
• https://github.com/cdedmondson/Modified-CVE-2019-15107
• https://github.com/chalern/Pentest-Tools
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/daotuongcxz/Khai_thac_lo_hong_phan_mem
• https://github.com/darrenmartyn/CVE-2019-15107
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/diegojuan/CVE-2019-15107
• https://github.com/dudek-marcin/Poc-Exp
• https://github.com/f0rkr/CVE-2019-15107
• https://github.com/fengjixuchui/RedTeamer
• https://github.com/fofapro/vulfocus
• https://github.com/foxsin34/WebMin-1.890-Exploit-unauthorized-RCE
• https://github.com/g0db0x/CVE_2019_15107
• https://github.com/g1vi/CVE-2019-15107
• https://github.com/gozn/detect-CVE-2019-15107-by-pyshark
• https://github.com/h1ck0r/wangdunsec.github.io
• https://github.com/h4ck0rman/CVE-2019-15107
• https://github.com/hacknotes/CVE-2019-15107-Exploit
• https://github.com/hadrian3689/webmin_1.920
• https://github.com/hanc00l/some_pocsuite
• https://github.com/hannob/webminex
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/huike007/penetration_poc
• https://github.com/huike007/poc
• https://github.com/hxysaury/saury-vulnhub
• https://github.com/ianxtianxt/CVE-2019-15107
• https://github.com/jas502n/CVE-2019-15107
• https://github.com/jas502n/CVE-2019-15642
• https://github.com/ketlerd/CVE-2019-15107
• https://github.com/kh4sh3i/Webmin-CVE
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/lmkelly/Webmin-1.920-RCE
• https://github.com/lnick2023/nicenice
• https://github.com/lolminerxmrig/CVE-2019-15107
• https://github.com/lonehand/TIPS
• https://github.com/merlin-ke/CVE_2019_15107
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/n0obit4/Webmin_1.890-POC
• https://github.com/olingo99/CVE-2019-15107
• https://github.com/orgTestCodacy11KRepos110MB/repo-3569-collection-document
• https://github.com/password520/Penetration_PoC
• https://github.com/password520/RedTeamer
• https://github.com/psw01/CVE-2019-15107_webminRCE
• https://github.com/puckiestyle/CVE-2019-15107
• https://github.com/q99266/saury-vulnhub
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/ruthvikvegunta/CVE-2019-15107
• https://github.com/seeu-inspace/easyg
• https://github.com/sobinge/nuclei-templates
• https://github.com/squid22/Webmin_CVE-2019-15107
• https://github.com/tom0li/collection-document
• https://github.com/ugur-ercan/exploit-collection
• https://github.com/wenruoya/CVE-2019-15107
• https://github.com/whokilleddb/CVE-2019-15107
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/wizardy0ga/THM-Source-CVE-2019-15231
• https://github.com/xbl3/awesome-cve-poc_qazbnm456
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji