writeups.xyz / CVE-2022–36446 — Webmin 1.996 — Remote Code Execution (RCE — Authenticated) During Install New Packages

Submitter : c2a

Date: 26 July 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection

Programs :

• Webmin

Authors :

• Emir Polat (@Devilsgrins)

Link :
https://medium.com/@emirpolat/cve-2022-36446-webmin-1-997-7a9225af3165