21 matches found
CVE-2025-57460
CVE-2025-57460 描述: machsol machpanel 8.0.32 中的文件上传漏洞允许攻击者获取 webshell。 POC: 导航到 https://controlpaneldomain/Client/SubmitTicket.aspx 上传 ASPx webshell，然后提交工单，最后打开该文件即可执行 Shell 并运行命令（如 whoami）。 发现者: Aljohara Abdulmohsen Alsubaie...
CVE-2025-57462
CVE-2025-57462 描述: machpanel 8.0.32 中存在通过恶意文件上传导致的存储型 XSS。 POC: 导航到 https://controlpaneldomain/Client/SubmitTicket.aspx 并上传包含 XSS 脚本（位于元数据中）的 PDF 文件，提交工单后，通过访问已上传的文件即可执行恶意 XSS 脚本。 发现者: Aljohara Abdulmohsen Alsubaie...
CVE-2025-57460
File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
EUVD-2025-205583
Reflected Cross site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
EUVD-2025-205584
File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
CVE-2025-57460
File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...
CVE-2025-57460
File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...
PT-2025-53722
Name of the Vulnerable Software and Affected Versions machsol machpanel version 8.0.32 Description A stored and reflected cross-site scripting issue exists in machsol machpanel version 8.0.32. This allows attackers to execute arbitrary web scripts or HTML through a crafted PDF file. The issue...
MachSol MachPanel 安全漏洞
MachSol MachPanel is a cloud automation control panel and billing platform from US-based MachSol. A security vulnerability exists in MachSol MachPanel version 8.0.32, which stems from a flaw in the file upload functionality that could lead to the acquisition of a webshell...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
CVE-2025-57462
Stored cross-site scripting xss in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file...
PT-2025-53721
Name of the Vulnerable Software and Affected Versions machsol machpanel version 8.0.32 Description A file upload issue exists in machsol machpanel version 8.0.32 that could allow an attacker to gain a webshell. The vulnerability involves the ability to upload malicious files, potentially leading ...
MachSol MachPanel 安全漏洞
MachSol MachPanel is a cloud automation control panel and billing platform from US-based MachSol. A security vulnerability exists in MachSol MachPanel version 8.0.32, which stems from mishandling of specially crafted PDF files and could lead to the execution of arbitrary web script or HTML...
CVE-2025-57460
MachSol MachPanel 8.0.32 is affected by a file upload vulnerability that enables an attacker to gain a webshell. The Red Hat, ENISA, NVD, CNNVD, CVE records concur on the issue being a file upload flaw in MachPanel 8.0.32, with high impact (C/H/I/A) and network access. Root cause is described as ...
CVE-2025-57462
MachSol MachPanel 8.0.32 is affected by a stored cross-site scripting (XSS) vulnerability exploitable through a crafted PDF file. The issue allows execution of arbitrary web scripts or HTML, as described across multiple sources (NVD, Red Hat, EUVD, CVE list, CNNVD, CNVD). CVSS 3.1 base score 6.1 ...