CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

CVE-2024-51568: Improper Neutralization of Special Elements used in an OS Command

CyberPanel aka Cyber Panel before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner sink. There is /filemanager/upload aka File Manager upload unauthenticated remote code execution via shell metacharacters...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by Usman Nasir, an individual developer. A security vulnerability exists in CyberPanel prior to version 2.3.5, which stems from a command injection vulnerability contained in completePath in the...

CVE-2024-51568

CyberPanel versions prior to 2.3.5 are vulnerable to unauthenticated remote code execution (RCE) due to a command injection flaw. The vulnerability exists in the ProcessUtilities.outputExecutioner() sink when handling the completePath parameter at the /filemanager/upload endpoint. An attacker can...