94 matches found
CVE-2023-36630: Unrestricted Upload of File with Dangerous Type
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass...
CVE-2023-36630
CVE-2023-36630 affects CloudPanel prior to version 2.3.1. The issue is insecure file upload that enables privilege escalation and authentication bypass. Documented impact aligns with high severity (C/H/I/A). The Red Hat/CNNVD/NVD entries corroborate the same description. A PoC is noted in the ADP...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
Authentication flaw
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CloudPanel 安全漏洞
CloudPanel is a free software from CloudPanel open source. It is used to configure and manage servers. A security vulnerability exists in CloudPanel versions prior to 2.3.1 that stems from having insecure file manager cookie authentication...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885
CloudPanel 2.x versions before 2.3.1 are vulnerable due to insecure file-manager cookie authentication, enabling remote code execution as root (CVSS 3.1: 9.8). Public disclosures and proof-of-concept tooling exist (Nuclei template for CVE-2023-35885; GitHub exploit). Affected product: CloudPanel;...
CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
CVE-2023-35885: Reliance on Cookies without Validation and Integrity Checking
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Mgt-Commerce Cloudpanel
CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @...
CloudPanel 2.2.2 Privilege Escalation / Path Traversal Exploit
CloudPanel versions 2.0.0 through 2.2.2 suffer from a privilege escalation vulnerability when a traversal is leveraged against clpctlWrapper for which all normal users have sudo access. Title : Privilege Escalation through path traversal CVE ID : CVE-2023-33747 Exploit Author : EagleEye Github :...
CloudPanel 2.2.2 Privilege Escalation / Path Traversal
Title : Privilege Escalation through path traversal CVE ID : CVE-2023-33747 Exploit Author : EagleEye Github : https://github.com/EagleTube/CloudPanel/tree/main/CVE-2023-33747 Version Affected : CloudPanel v2.0.0 - v2.2.2 Vendor : CloudPanel.io Date : 31/05/2023 , 12:00 PM Step : Login as ssh as...
CVE-2023-33747
CloudPanel v2.2.2 allows attackers to execute a path traversal...
CVE-2023-33747
CloudPanel v2.2.2 allows attackers to execute a path traversal...
Path traversal
CloudPanel v2.2.2 allows attackers to execute a path traversal...
MGT-COMMERCE CloudPanel 路径遍历漏洞
MGT-COMMERCE CloudPanel is a free solution from MGT-COMMERCE Open Source. It is designed to ease the burden of managing self-hosted Linux servers. A security vulnerability exists in MGT-COMMERCE CloudPanel version 2.2.2, which stems from a vulnerability that allows an attacker to perform path...