CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - Preuve de concept d'injection de commande CyberPanel Un environnement de preuve de concept et un modèle Nuclei pour tester CVE-2024-51568, une vulnérabilité critique d'injection de commande sans authentification dans CyberPanel. Détails de la vulnérabilité CVE : CVE-2024-51568...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by Usman Nasir, an individual developer. A security vulnerability exists in CyberPanel prior to version 2.3.5, which stems from a command injection vulnerability contained in completePath in the...

CVE-2024-51568

CyberPanel pre-2.3.5 is affected by a critical, unauthenticated pre-auth RCE via command injection in the file upload path. Specifically, CVE-2024-51568 exploits the completePath parameter in the ProcessUtilities.outputExecutioner() sink, enabling remote code execution through /filemanager/upload...