• info
• discussion
• exploit
• solution
• references

Webmin Remote Directory Traversal Vulnerability

It is reported that Webmin may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to present itself in Webmin running on Windows platforms. A remote attacker may traverse outside the server root directory by using encoded '\..' character sequences.