Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2006-3392 — Webmin Local File Include (unauthenticated) | Kitploit

GitHub/kernel-cyber/cve-2006-3392

Vulnerability Analysis Exploitation Information Gathering Web Security Penetration Testing

kernel-cyber/cve-2006-3392

CVE-2006-3392

Webmin Local File Include (unauthenticated)

View Repository

3 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2021-42913

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename.