{"id":"CVE-2012-2982","aliases":["EUVD-2012-2960","GHSA-vpgr-2w9j-94m5"],"status":"published","title":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary...","description":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.61925,"percentile":0.9918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2012-09-11T18:00:00Z","modified":"2026-06-16T23:42:27Z","exploits":[{"source":"exploitdb","id":"EDB-21851","title":"Webmin 1.580 - '/file/show.cgi' Remote Command Execution (Metasploit)","type":"remote","platform":"unix","date":"2012-10-10","verified":true,"url":"https://www.exploit-db.com/exploits/21851"},{"source":"metasploit","id":"exploit/unix/webapp/webmin_show_cgi_exec","title":"Webmin /file/show.cgi Remote Command Execution","type":"exploit","platform":"Unix","date":"2012-09-06","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/webmin_show_cgi_exec"},{"source":"pocgithub","id":"0xF331-D3AD/CVE-2012-2982","title":"0xF331-D3AD/CVE-2012-2982","date":"2022-06-16","url":"https://github.com/0xF331-D3AD/CVE-2012-2982"},{"source":"pocgithub","id":"0xTas/CVE-2012-2982","title":"0xTas/CVE-2012-2982","date":"2022-12-15","url":"https://github.com/0xTas/CVE-2012-2982"},{"source":"pocgithub","id":"Ari-Weinberg/CVE-2012-2982","title":"Ari-Weinberg/CVE-2012-2982","date":"2021-04-06","url":"https://github.com/Ari-Weinberg/CVE-2012-2982"},{"source":"pocgithub","id":"CpyRe/CVE-2012-2982","title":"CpyRe/CVE-2012-2982","date":"2024-03-21","url":"https://github.com/CpyRe/CVE-2012-2982"},{"source":"pocgithub","id":"Gvmyz/CVE-2012-2982_Python","title":"Gvmyz/CVE-2012-2982_Python","date":"2021-03-18","url":"https://github.com/Gvmyz/CVE-2012-2982_Python"},{"source":"pocgithub","id":"JRrooot/CVE-2012-2982-Webmin-RCE","title":"JRrooot/CVE-2012-2982-Webmin-RCE","date":"2026-01-05","url":"https://github.com/JRrooot/CVE-2012-2982-Webmin-RCE"},{"source":"pocgithub","id":"JohnHammond/CVE-2012-2982","title":"JohnHammond/CVE-2012-2982","date":"2021-09-04","url":"https://github.com/JohnHammond/CVE-2012-2982"},{"source":"pocgithub","id":"OstojaOfficial/CVE-2012-2982","title":"OstojaOfficial/CVE-2012-2982","date":"2020-10-25","url":"https://github.com/OstojaOfficial/CVE-2012-2982"},{"source":"pocgithub","id":"Shadow-Spinner/CVE-2012-2982_python","title":"Shadow-Spinner/CVE-2012-2982_python","date":"2024-06-15","url":"https://github.com/Shadow-Spinner/CVE-2012-2982_python"},{"source":"pocgithub","id":"SieGer05/CVE-2012-2982-Webmin-Exploit","title":"SieGer05/CVE-2012-2982-Webmin-Exploit","date":"2025-03-05","url":"https://github.com/SieGer05/CVE-2012-2982-Webmin-Exploit"},{"source":"pocgithub","id":"SincIDK/CVE-2012-2982-Exploit-Script","title":"SincIDK/CVE-2012-2982-Exploit-Script","date":"2025-08-03","url":"https://github.com/SincIDK/CVE-2012-2982-Exploit-Script"},{"source":"pocgithub","id":"blu3ming/CVE-2012-2982","title":"blu3ming/CVE-2012-2982","date":"2022-02-16","url":"https://github.com/blu3ming/CVE-2012-2982"},{"source":"pocgithub","id":"boriitoo/CVE-2012-2982","title":"boriitoo/CVE-2012-2982","date":"2025-09-08","url":"https://github.com/boriitoo/CVE-2012-2982"},{"source":"pocgithub","id":"cd6629/CVE-2012-2982-Python-PoC","title":"cd6629/CVE-2012-2982-Python-PoC","date":"2020-08-05","url":"https://github.com/cd6629/CVE-2012-2982-Python-PoC"},{"source":"pocgithub","id":"elliotosama/CVE-2012-2982","title":"elliotosama/CVE-2012-2982","date":"2024-08-09","url":"https://github.com/elliotosama/CVE-2012-2982"},{"source":"pocgithub","id":"lpuv/CVE-2012-2982","title":"lpuv/CVE-2012-2982","date":"2025-03-14","url":"https://github.com/lpuv/CVE-2012-2982"},{"source":"pocgithub","id":"marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-","title":"marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-","date":"2026-05-25","url":"https://github.com/marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-"},{"source":"pocgithub","id":"varppi/CVE-2012-2982","title":"varppi/CVE-2012-2982","date":"2021-12-10","url":"https://github.com/varppi/CVE-2012-2982"}],"products":[{"vendor":"gentoo","product":"webmin"}],"references":[{"url":"http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/788478","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","US Government Resource"]},{"url":"https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1027507","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://americaninfosec.com/research/index.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2982"},{"url":"https://github.com/advisories/GHSA-vpgr-2w9j-94m5"}],"sources":{"cve":[{"id":"CVE-2012-2982","description":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.","status":"published","published":"2012-09-11T18:00:00Z","modified":"2024-08-06T19:50:05.315Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2960","description":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.","status":"published","published":"2012-09-11T18:00:00Z","modified":"2024-08-06T19:50:05Z","updated_at":"2026-11-03T01:56:12.278388Z"}],"ghsa":[{"id":"GHSA-vpgr-2w9j-94m5","title":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary...","description":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.","status":"published","published":"2022-05-17T05:09:14Z","modified":"2023-01-28T05:03:21Z","updated_at":"2026-11-02T14:43:57.475723Z"}],"nvd":[{"id":"CVE-2012-2982","description":"file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.","status":"published","published":"2012-09-11T18:55:01.237Z","modified":"2026-06-16T23:42:27.95Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:15.643902Z"}]}}