← ExploitWatch
HomeExploited Vulnerabilities

CVE-2019-15107 — Actively Exploited: Webmin (Webmin)

An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.

CVE IDCVE-2019-15107
VendorWebmin
ProductWebmin
Vulnerability nameWebmin Command Injection Vulnerability
Date added2022-03-25
Remediation due2022-04-15
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionAn issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →