CVE-2019-12791

A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form...

PT-2019-12945

Name of the Vulnerable Software and Affected Versions Vesta Control Panel version 0.9.8-24 Description A directory traversal issue in the v-list-user script allows remote attackers to escalate privileges from regular registered users to root via the password reset form. Recommendations For Vesta...

CVE-2019-12791: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form...