CVE-2019-9624

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.rapid7.com/db/modules/exploit/unix/webapp/webmin_upload_execThird Party Advisory
https://pentest.com.tr/exploits/Webmin-1900-Remote-Command-Execution.htmlExploit, Third Party Advisory
https://www.exploit-db.com/exploits/46201Exploit, Third Party Advisory, VDB Entry
http://www.rapid7.com/db/modules/exploit/unix/webapp/webmin_upload_execThird Party Advisory
https://pentest.com.tr/exploits/Webmin-1900-Remote-Command-Execution.htmlExploit, Third Party Advisory
https://www.exploit-db.com/exploits/46201Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 7, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-96258.8JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.CVE-2019-96269.8PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.CVE-2019-96277.0A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker CVE-2019-96287.5The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML pa CVE-2019-96299.8Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials).CVE-2019-96307.5Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository fil CVE-2019-96319.8Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.CVE-2019-96327.5ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack CVE-2019-96336.5gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting e CVE-2019-96347.8Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.CVE-2019-96356.5NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.CVE-2019-96369.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NF