VDB

CVE-2019-15107

CVE-2019-15107 PUBLISHED KEV CVSS 10 CRITICAL

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

EPSS 99.71% · 100.0th percentile

Risk Scores

CVSS 2.0
10
EPSS Score
99.71%
100.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
webminwebmin0

Timeline

  • CVE Published
  • Aug 12, 2019 PoC Published
  • Aug 18, 2019 PoC Published
  • Aug 19, 2019 PoC Published
  • Aug 19, 2019 VulnCheck XDB Entry
  • Aug 22, 2019 VulnCheck XDB Entry
  • Aug 23, 2019 PoC Published
  • Aug 27, 2019 PoC Published
  • Oct 15, 2019 VulnCheck XDB Entry
  • Oct 24, 2019 VulnCheck XDB Entry
  • Dec 15, 2019 VulnCheck XDB Entry
  • Dec 17, 2019 VulnCheck KEV Exploitation

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›