Vesta Control Panel 代码问题漏洞

Vesta Control Panel VestaCP is an open source web hosting control panel. A code issue vulnerability exists in Vesta Control Panel version 0.9.8-27 and prior versions, which stems from web upload UploadHandler.php allowing uploads from different sources...

Vesta Control Panel Elevation of Privilege Vulnerability

Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel 0.9.8-26 and earlier versions. The vulnerability can be exploited by an attacker to gain root privileges on the system with the help of v-change-user-password user...

Vesta Control Panel Input Validation Error Vulnerability

Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel 0.9.8-26 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands on the system with the help of the cron jobs module...

CVE-2020-10787

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10787

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

Command injection

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Privilege escalation

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

CVE-2020-10787

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

CVE-2020-10787

CVE-2020-10787 concerns an elevation of privilege in Vesta Control Panel (VestaCP) up to version 0.9.8-26. Multiple sources confirm that an attacker can gain root system access from the admin account via the v-change-user-password script. Affected product: Vesta Control Panel; vulnerable componen...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

CVE-2020-10786 affects Vesta Control Panel (VestaCP) w/ versions 0.9.8-26 and earlier. A remote command execution is possible because an authenticated user can abuse the cron jobs module to run arbitrary commands on the underlying system. Impact is high (remote, unauthenticated? actually authenti...

CVE-2020-10787: Undefined Security Weakness

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password aka the user password change script...

PT-2020-12321

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions 0.9.8-26 Description The issue allows an attacker to gain root system access from the admin account via the v-change-user-password script, also known as the user password change script. This script is used to chang...

PT-2020-12320

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions 0.9.8-26 Description A remote command execution issue allows any authenticated user to execute arbitrary commands on the system via cron jobs. Recommendations For versions 0.9.8-26, consider restricting access to...

CVE-2020-10786: Incorrect Authorization

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution Exploit

This Metasploit module exploits an authenticated command injection vulnerability in the v-list-user-backups bash script file in Vesta Control Panel to gain remote code execution as the root user. This module requires Metasploit: https://metasploit.com/download Current source:...

Vesta Control Panel Authenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Vesta Control Panel Authenticated Remote Code Execution", 'Description' = %q This module exploits an authenticated command injection vulnerabilit...

Vesta Control Panel Authenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Vesta Control Panel Authenticated Remote Code Execution", 'Description' = %q This module exploits command injection vulnerability in...