EUVD-2013-7260

Malware in sbrugna...

CVE-2013-10053

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an...

CVE-2013-10053

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an...

CVE-2013-10053 ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an...

CVE-2013-10053

CVE-2013-10053 describes a remote command execution in ZPanel 10.0.0.2’s htpasswd module. The inHTUsername field is passed unsanitized to a system() call that invokes htpasswd, allowing an authenticated attacker (Users/Resellers/Administrators) to inject shell metacharacters and execute arbitrary...

CVE-2013-10053 ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an...

PT-2025-31689 · Zpanel · Zpanel

Name of the Vulnerable Software and Affected Versions: ZPanel version 10.0.0.2 Description: A remote command execution issue exists in the htpasswd module. The inHTUsername field, when creating .htaccess files, is passed to a system call without proper sanitization, which invokes the system’s...

zpanelx 安全漏洞

zpanelx is an open source web hosting control panel from The ZPanel Project. A security vulnerability exists in zpanelx version 10.0.0.2, which stems from insufficient input cleanup in the htpasswd module and could lead to remote code execution...

ZPanel 10.0.0.2 htpasswd Module Username Command Execution

This Metasploit module exploits a vulnerability found in ZPanel's htpasswd module. When creating .htaccess using the htpasswd module, the username field can be used to inject system commands, which is passed on to a system function for executing the system's htpasswd's command. Please note: In...