aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 الوصف : يسمح للمستخدمين المصادق عليهم عن بُعد بتنفيذ أوامر عشوائية عبر قائمة الإعدادات في متجر البرامج. الإصدار المتأثر : جميع الإصدارات = 6.6.6 معلومات لإعداد هذا الـ PoC، قمت فقط بتثبيت البرنامج باستخدام docker-compose نوع الثغرة : تنفيذ الأوامر عن بُعد RC...

EUVD-2020-7085

Malware in sbrugna...

CVE-2020-14950

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

CVE-2020-14950

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

CVE-2020-14950

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

Design/Logic Flaw

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

CVE-2020-14950

CVE-2020-14950 affects aaPanel (up to version 6.6.6 and earlier). The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request under the Software Store settings menu. Root cause: insufficient validatio...