Bogus exploit 46201.rb about exploitdb HOT 2 CLOSED

Ilia's comment is a little imprecise here, but he's right that this is a bizarre thing to call an exploit. Webmin is working as designed and as documented. Any user can be a root-level user in Webmin, and when you just create a user in Webmin it will be a root level user, unless access controls are defined for that user. It's an administrative tool.

In short, it doesn't make sense to call behavior an exploit when it is acting as designed and as documented (see: https://doxfer.webmin.com/Webmin/Webmin_Users#Editing_module_access_control )

from exploitdb.

It has a CVE (CVE-2019-9624), so its added ~ https://nvd.nist.gov/vuln/detail/CVE-2019-9624
The exploit itself is a mirror from Metasploit

from exploitdb.