CVE-2025-57460

CVE-2025-57460 Descripción: Vulnerabilidad de carga de archivos en machsol machpanel 8.0.32 permite a un atacante obtener una webshell. PoC: Navegue a https://controlpaneldomain/Client/SubmitTicket.aspx y cargue una webshell ASPx, luego envíe el ticket, finalmente abra el archivo para ejecutar la...

CVE-2025-57462

CVE-2025-57462 Des: Stored XSS via Malicious File Upload in machpanel 8.0.32. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload PDF file that contain XSS scripts in metadata, after submitting the ticket you can execute malicius XSS script by accessing the uplaoded...

CVE-2025-57460

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

CVE-2025-57462

Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

EUVD-2025-205583

Reflected Cross site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

EUVD-2025-205584

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

CVE-2025-57462

Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

CVE-2025-57462

Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

CVE-2025-57460

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

CVE-2025-57460

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

PT-2025-53722

Name of the Vulnerable Software and Affected Versions machsol machpanel version 8.0.32 Description A stored and reflected cross-site scripting issue exists in machsol machpanel version 8.0.32. This allows attackers to execute arbitrary web scripts or HTML through a crafted PDF file. The issue...

MachSol MachPanel 安全漏洞

MachSol MachPanel is a cloud automation control panel and billing platform from US-based MachSol. A security vulnerability exists in MachSol MachPanel version 8.0.32, which stems from a flaw in the file upload functionality that could lead to the acquisition of a webshell...

CVE-2025-57460: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

CVE-2025-57462

Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

CVE-2025-57462

Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...

CVE-2025-57460

MachSol MachPanel 8.0.32 is affected by a file upload vulnerability that enables an attacker to gain a webshell. The Red Hat, ENISA, NVD, CNNVD, CVE records concur on the issue being a file upload flaw in MachPanel 8.0.32, with high impact (C/H/I/A) and network access. Root cause is described as ...

MachSol MachPanel 安全漏洞

MachSol MachPanel is a cloud automation control panel and billing platform from US-based MachSol. A security vulnerability exists in MachSol MachPanel version 8.0.32, which stems from mishandling of specially crafted PDF files and could lead to the execution of arbitrary web script or HTML...

CVE-2025-57460

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

PT-2025-53721

Name of the Vulnerable Software and Affected Versions machsol machpanel version 8.0.32 Description A file upload issue exists in machsol machpanel version 8.0.32 that could allow an attacker to gain a webshell. The vulnerability involves the ability to upload malicious files, potentially leading ...

CVE-2025-57462

A Stored and Reflected Cross-site Scripting (XSS) vulnerability exists in machsol machpanel version 8.0.32 . The flaw stems from the mishandling of specially crafted PDF files , which allows an attacker to execute arbitrary web scripts or HTML. A proof-of-concept involves navigating to the Submit...