CVE-2024-53376

CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI...

CVE-2024-53376

CyberPanel versions prior to 2.3.8 are vulnerable to an OS command injection vulnerability. This flaw exists in the /websites/submitWebsiteCreation URI, where the application fails to neutralize shell metacharacters in the phpSelection field. An authenticated remote attacker can exploit this by s...

CVE-2024-53376: Improper Neutralization of Special Elements used in an OS Command

CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI...