185 matches found
Vesta Control Panel 0.9.8-16 - Local Privilege Escalation
Vesta Control Panel 0.9.8-16 - Local Privilege Escalation !/bin/bash Exploit Title: Vesta Control Panel 0.9.7 suid.c PWN Make PWN shell script executable. chmod...
Vesta Control Panel 0.9.8-16 - Local Privilege Escalation
!/bin/bash Exploit Title: Vesta Control Panel 0.9.7 suid.c PWN Make PWN shell script executable. chmod +x PWN Inject command to run PWN into v-get-web-domain-value paramet...
PT-2016-07
Name of the Vulnerable Software and Affected Versions Vesta Control Panel affected versions not specified Description The issue is related to the lack of session checking in the files.php file, which is part of the file manager in the Vesta Control Panel. This could allow a remote attacker to...
Vesta Control Panel Cross-Site Scripting Vulnerability
Vesta Control Panel is an open source web hosting control panel. Vesta Control Panel suffers from a cross-site scripting vulnerability that could be exploited by attackers to conduct cross-site scripting attacks...
Vesta Control Panel 0.9.8-15 Cross Site Scripting
Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4. We log-in VestaCP via password we changed https:...
Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting
Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4. We log-in VestaCP via password we changed https://victim:8083/ Discov...
Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting
Exploit for php platform in category web applications Exploit Title :Vesta Control Panel " http://victimserve...
Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting
Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4...
Vesta Control Panel Cross-Site Request Forgery Vulnerability (CNVD-2015-04122)
Vesta Control Panel is an open source web hosting control panel. Vesta Control Panel versions prior to 0.9.8-14 suffer from a cross-site request forgery vulnerability that allows remote attackers to hijack the authentication of arbitrary user identities...
Vesta Control Panel 0.9.8 - OS Command Injection
Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor Patch: June 3, 2015 Public Disclosure: June 17,...
Vesta Control Panel 0.9.8 - OS Command Injection
Vesta Control Panel 0.9.8 - OS Command Injection Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor...
Vesta Control Panel 0.9.8 OS Command Injection Vulnerability
Vesta Control Panel version 0.9.8 suffers from an OS command injection vulnerability. Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 2...
OS Command Injection in Vesta Control Panel
Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor Patch: June 3, 2015 Public Disclosure: June 17,...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-2861
Cross-site request forgery CSRF vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-2861
Cross-site request forgery CSRF vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-2861
CVE-2015-2861 affects Vesta Control Panel prior to version 0.9.8-14. It is a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to hijack the authentication of arbitrary users who have an active session. Root cause is CSRF in the web interface enabling actions with the victim...
PT-2015-5944
Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions prior to 0.9.8-14 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 0.9.8-14, update to version 0.9.8-14 o...
CVE-2015-2861: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users...
Vesta Control Panel OS Command Injection Vulnerability
Vesta Control Panel is an open source web hosting control panel. Vesta Control Panel has a security vulnerability. Because the input passed to "/list/backup/index.php" via the "backup" HTTP GET parameter is not sufficiently filtered before using the PHP 'exec' function, a remote attacker can inje...