Unrated severityOSV Advisory· Published Mar 7, 2019· Updated Aug 4, 2024

CVE-2019-9624

Description

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Webmin/WebminOSV2 versions
1.700, 1.710, 1.720, …+ 1 more
- (no CPE)range: 1.700, 1.710, 1.720, …
- (no CPE)range: =1.900

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/46201mitreexploitx_refsource_EXPLOIT-DB
www.rapid7.com/db/modules/exploit/unix/webapp/webmin_upload_execmitrex_refsource_MISC
pentest.com.tr/exploits/Webmin-1900-Remote-Command-Execution.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.019
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000