CVE-2019-9624

PoC ×2—

CVSS 3.0

7.8 high

EPSS

24%p98

Published

Mar 7, 2019 (Mar 7, 2019)

Modified

Jun 17, 2026

Description

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.

Vendors: webmin
Products: webmin
Weakness: CWE-269
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (23.7%)

In the news0 stories

No ingested article mentions this CVE yet.