{"uuid": "308e45cc-ea4b-49d3-8917-8bfeb1c4599c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2983", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/webmin/edit_html_fileaccess.rb", "content": "{\"actions\": [{\"description\": \"Download arbitrary file\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Unknown\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a directory traversal in Webmin 1.580. The vulnerability\\n          exists in the edit_html.cgi component and allows an authenticated user with access\\n          to the File Manager Module to access arbitrary files with root privileges. The\\n          module has been tested successfully with Webmin 1.580 over Ubuntu 10.04.\", \"disclosure_date\": \"2012-09-06\", \"fullname\": \"auxiliary/admin/webmin/edit_html_fileaccess\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 08:32:40 +0000\", \"name\": \"Webmin edit_html.cgi file Parameter Traversal Arbitrary File Access\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/webmin/edit_html_fileaccess.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/webmin/edit_html_fileaccess\", \"references\": [\"OSVDB-85247\", \"BID-55446\", \"CVE-2012-2983\", \"URL-http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf\", \"URL-https://github.com/webmin/webmin/commit/4cd7bad70e23e4e19be8ccf7b9f245445b2b3b80\"], \"rport\": 10000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:57.068992Z"}