CVE-2015-4117

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php...

PT-2018-4375

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions prior to 0.9.8-14 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by using shell metacharacters in the backup parameter to the "/list/backup/index.php" API...