81 matches found
CVE-2023-46157
File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing file permissions to 4755...
CVE-2023-46157
CVE-2023-46157 affects MGT CloudPanel 2.0.0–2.3.2. The root cause is a vulnerability in File-Manager allowing OS command injection by a lowest-privilege user through altering file ownership and setting file permissions to 4755. The provided documents consistently describe this as the impact (comm...
The vulnerability of the File Manager component in the server and cloud service management panel, CloudPanel, allows a hacker to gain unauthorized access to protected information and increase their privileges.
The vulnerability of the File Manager component in the server and cloud service management panel, CloudPanel, is related to deficiencies in access control when processing clp-fm cookie files without verifying their authenticity and integrity. Exploiting this vulnerability can allow an attacker to...
CVE-2023-36630
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
CVE-2023-36630
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
Authentication flaw
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
CVE-2023-36630
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
CloudPanel 代码问题漏洞
CloudPanel is a free software from CloudPanel open source. It is used to configure and manage servers. A security vulnerability exists in CloudPanel versions prior to 2.3.1, which stems from the fact that insecure file uploads can lead to elevation of privilege and authentication bypass...
CVE-2023-36630
CVE-2023-36630 affects CloudPanel prior to version 2.3.1. The issue is insecure file upload that enables privilege escalation and authentication bypass. Documented impact aligns with high severity (C/H/I/A). The Red Hat/CNNVD/NVD entries corroborate the same description. A PoC is noted in the ADP...
CVE-2023-36630
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
CVE-2023-36630
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
PT-2023-25643 · Unknown · Cloudpanel
Name of the Vulnerable Software and Affected Versions: CloudPanel versions prior to 2.3.1 Description: The issue is related to insecure file upload, which leads to privilege escalation and authentication bypass. This allows unauthorized access and elevated privileges. Recommendations: For version...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
Authentication flaw
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2.x versions before 2.3.1 are vulnerable due to insecure file-manager cookie authentication, enabling remote code execution as root (CVSS 3.1: 9.8). Public disclosures and proof-of-concept tooling exist (Nuclei template for CVE-2023-35885; GitHub exploit). Affected product: CloudPanel;...
CloudPanel 安全漏洞
CloudPanel is a free software from CloudPanel open source. It is used to configure and manage servers. A security vulnerability exists in CloudPanel versions prior to 2.3.1 that stems from having insecure file manager cookie authentication...