CVE-2024-51378

CyberPanel 명령 주입 취약점 - CVE-2024-51378 CyberPanel 사전 인증 RCE원격 코드 실행 명령 주입 익스플로잇 작성자: Luka Petrovic refr4g 공개 날짜: 2024년 10월 개요 CyberPanel의 명령 주입 취약점CVE-2024-51378에 대한 개념 증명PoC 익스플로잇입니다. 이 취약점을 통해 인증되지 않은 공격자가 /dns/getresetstatus 및 /ftp/getresetstatus 엔드포인트로 조작된 OPTIONS HTTP 요청을 전송하여 취약한 서버에 임의 명령을 ...

The vulnerability of the getresetstatus function in the CyberPanel web hosting control panel allows a hacker to execute arbitrary commands.

The vulnerability of the getresetstatus function in the CyberPanel web hosting control panel’s views.py and ftp.views.py files is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by Usman Nasir, an individual developer. CyberPanel has a security vulnerability that originates from getresetstatus in dns/views.py that allows remote attackers to bypass authentication and execute arbitrary commands v...

CVE-2024-51378

getresetstatus in dns/views.py and ftp/views.py in CyberPanel aka Cyber Panel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware which is only for a POST request and using shell...

CVE-2024-51378

CyberPanel CVE-2024-51378 is an unauthenticated remote code execution affecting CyberPanel before patch 1c0c6cb (versions through 2.3.6 and unpatched 2.3.7). The vulnerability lies in getresetstatus endpoints at /dns/getresetstatus and /ftp/getresetstatus, where an attacker can bypass secMiddlewa...