{"uuid": "2fe386f0-6204-4afd-8b1e-fb1ba5329d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-3392", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/webmin/file_disclosure.rb", "content": "{\"actions\": [{\"description\": \"Download arbitrary file\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Matteo Cantoni \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"A vulnerability has been reported in Webmin and Usermin, which can be\\n          exploited by malicious people to disclose potentially sensitive information.\\n          The vulnerability is caused due to an unspecified error within the handling\\n          of an URL. This can be exploited to read the contents of any files on the\\n          server via a specially crafted URL, without requiring a valid login.\\n          The vulnerability has been reported in Webmin (versions prior to 1.290) and\\n          Usermin (versions prior to 1.220).\", \"disclosure_date\": \"2006-06-30\", \"fullname\": \"auxiliary/admin/webmin/file_disclosure\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 08:32:40 +0000\", \"name\": \"Webmin File Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/webmin/file_disclosure.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/webmin/file_disclosure\", \"references\": [\"OSVDB-26772\", \"BID-18744\", \"CVE-2006-3392\", \"US-CERT-VU-999601\", \"URL-https://web.archive.org/web/20060722192501/http://secunia.com/advisories/20892/\"], \"rport\": 10000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:57.175104Z"}