Lucene search
MitreCVELIST:CVE-2022-36446HistoryJul 25, 2022 - 5:56 a.m.
CVE-2022-36446
2022-07-2505:56:47
mitre
www.cve.org
1
software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
References
packetstormsecurity.com/files/167894/Webmin-1.996-Remote-Code-Execution.html
packetstormsecurity.com/files/168049/Webmin-Package-Updates-Command-Injection.html
gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b
github.com/webmin/webmin/commit/13f7bf9621a82d93f1e9dbd838d1e22020221bde
github.com/webmin/webmin/compare/1.996...1.997
www.exploit-db.com/exploits/50998
Related
openvas
openvas
Webmin < 1.997 XSS Vulnerability
2022-07-27 00:00:00
zdt
zdt
Webmin 1.996 - Remote Code Execution (Authenticated) Exploit
2022-08-01 00:00:00
nuclei
nuclei
Webmin <1.997 - Authenticated Remote Code Execution
2022-08-21 05:03:11
nessus
nessus
Webmin < 1.997 RCE
2022-09-15 00:00:00
githubexploit
githubexploit
Exploit for Improper Encoding or Escaping of Output in Webmin
2022-08-11 11:47:17
packetstorm
packetstorm
Webmin Package Updates Command Injection
2022-08-10 00:00:00
Webmin 1.996 Remote Code Execution
2022-08-01 00:00:00
prion
prion
Command injection
2022-07-25 06:15:00
cve
cve
CVE-2022-36446
2022-07-25 06:15:07
osv
osv
CVE-2022-36446
2022-07-25 06:15:07
nvd
nvd
CVE-2022-36446
2022-07-25 06:15:07
metasploit
metasploit
Webmin Package Updates RCE
2022-08-03 10:01:41
exploitdb
exploitdb
Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)
2022-08-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Webmin Command Injection (CVE-2020-35606; CVE-2022-36446)
2021-01-20 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-08-12 18:52:27