Test ID:	1.3.6.1.4.1.25623.1.0.141897
Category:	Web application abuses
Title:	Webmin <= 1.941 RCE Vulnerability
Summary:	Webmin is prone to an authenticated remote code execution (RCE); vulnerability.
Description:	Summary: Webmin is prone to an authenticated remote code execution (RCE) vulnerability. Affected Software/OS: Webmin through version 1.941. The vendor does not classify this vulnerability as workable exploit, as it requires that the attacker already knows the root password. Hence there is no fix for it in Webmin. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-9624 https://www.exploit-db.com/exploits/46201 http://www.rapid7.com/db/modules/exploit/unix/webapp/webmin_upload_exec https://pentest.com.tr/exploits/Webmin-1900-Remote-Command-Execution.html
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.