Every CVE Search/ Get API key

CVE-2012-2982

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary...

6.5 MediumPublic exploit

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Exploit likelihood

61.9%Down 25.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Record
CVE-2012-2982
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Record
CVE-2012-2982
Updated
2026-11-02
EUVDEUVD-2012-2960 No score

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Record
EUVD-2012-2960
Updated
2026-11-03
GitHub AdvisoriesGHSA-vpgr-2w9j-94m5 No score

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary...

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Record
GHSA-vpgr-2w9j-94m5
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBWebmin 1.580 - '/file/show.cgi' Remote Command Execution (Metasploit)2012-10-10
MetasploitWebmin /file/show.cgi Remote Command Execution2012-09-06
PoC in GitHub0xF331-D3AD/CVE-2012-29822022-06-16
PoC in GitHub0xTas/CVE-2012-29822022-12-15
PoC in GitHubAri-Weinberg/CVE-2012-29822021-04-06
PoC in GitHubCpyRe/CVE-2012-29822024-03-21
PoC in GitHubGvmyz/CVE-2012-2982_Python2021-03-18
PoC in GitHubJRrooot/CVE-2012-2982-Webmin-RCE2026-01-05
PoC in GitHubJohnHammond/CVE-2012-29822021-09-04
PoC in GitHubOstojaOfficial/CVE-2012-29822020-10-25
Show 10 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubShadow-Spinner/CVE-2012-2982_python2024-06-15
PoC in GitHubSieGer05/CVE-2012-2982-Webmin-Exploit2025-03-05
PoC in GitHubSincIDK/CVE-2012-2982-Exploit-Script2025-08-03
PoC in GitHubblu3ming/CVE-2012-29822022-02-16
PoC in GitHubboriitoo/CVE-2012-29822025-09-08
PoC in GitHubcd6629/CVE-2012-2982-Python-PoC2020-08-05
PoC in GitHubelliotosama/CVE-2012-29822024-08-09
PoC in GitHublpuv/CVE-2012-29822025-03-14
PoC in GitHubmarinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-2026-05-25
PoC in GitHubvarppi/CVE-2012-29822021-12-10

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2982 is a medium vulnerability (CVSS 6.5) in Gentoo Webmin, published September 11, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.9%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open