CVE-2019-15107

No fix known ExploitedEPSS 100%CVSS 9.8

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Published 2019-08-16 · In CISA KEV since 2022-03-25 · CVE record · OSV

Products: webmin