CVE-2019-15107—Webmin Command Injection Vulnerability

PUBLISHEDvulnerability record
2022-03-25 · last modified May 22, 2026

Metadata

CVE ID:
CVE-2019-15107
Project:
Webmin
Product:
Webmin
Date Added:
2022-03-25
Due Date:
2022-04-15
Last Updated:
May 22, 2026

Vulnerability Name

Webmin Command Injection Vulnerability

Description

An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2019-15107

Related Weaknesses

browse all CVEs