Vulners
Lucene search
aaPanel 6.6.6 Privilege Escalation
🗓️ 16 Oct 2020 00:00:00Reported by Unsal Furkan HaraniType 
packetstorm🔗 packetstormsecurity.com👁 319 Views
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Exploit for Argument Injection in Aapanel | 18 Jun 202011:04 | – | githubexploit |
 | aaPanel Remote Code Execution Vulnerability | 19 Jun 202000:00 | – | cnvd |
 | CVE-2020-14421 | 18 Jun 202012:51 | – | cve |
 | CVE-2020-14421 | 18 Jun 202012:51 | – | cvelist |
 | aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated) | 16 Oct 202000:00 | – | exploitdb |
 | EUVD-2020-6560 | 7 Oct 202500:30 | – | euvd |
 | CVE-2020-14421 | 18 Jun 202013:15 | – | nvd |
 | CVE-2020-14421 | 18 Jun 202013:15 | – | osv |
| 📄 aaPanel 7.x.x Remote Command Execution | 19 Sep 202500:00 | – | packetstorm |
 | Code injection | 18 Jun 202013:15 | – | prion |
10
`# Exploit Title: [aaPanel 6.6.6 - Authenticated Privilege Escalation]
# Google Dork: []
# Date: [04.05.2020]
# Exploit Author: [Ünsal Furkan Harani (Zemarkhos)]
# Vendor Homepage: [https://www.aapanel.com/](https://www.aapanel.com/)
# Software Link: [https://github.com/aaPanel/aaPanel](https://github.com/aaPanel/aaPanel)
# Version: [6.6.6] (REQUIRED)
# Tested on: [Linux ubuntu 4.4.0-131-generic #157-Ubuntu SMP Thu Jul 12 15:51:36 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux]
# CVE : [CVE-2020-14421]
if you are logged was admin;
1- go to the crontab
2- select shell script and paste your reverse shell code
3- click execute button and you are now root.
because crontab.py running with root privileges.
Remote Code Execution
https://github.com/jenaye/aapanel
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Oct 2020 00:00Current
0.7Low risk
Vulners AI Score0.7
EPSS0.09449