Vestacp Archives - CVE Vulnerability

CVE-2018-18547

Sun, 26 Feb 2023 06:47:49 +0000

Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/directory/ dir_a parameter, or the filename to the list/directory/ URI.

The post CVE-2018-18547 appeared first on CVE Vulnerability.

CVE-2018-10686

Sun, 26 Feb 2023 06:44:58 +0000

An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST[‘path’] to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a file_put_contents call in web/upload/UploadHandler.php.

The post CVE-2018-10686 appeared first on CVE Vulnerability.

CVE-2018-1000884

Sun, 26 Feb 2023 06:44:42 +0000

Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 — any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code — web/reset/index.php, line 51 that can result in Possible to determine password reset codes, attacker is able to change administrator password. This attack appear to be exploitable via Unauthenticated network connectivity. This vulnerability appears to have been fixed in After commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 — release version 0.9.8-19.

The post CVE-2018-1000884 appeared first on CVE Vulnerability.

CVE-2020-10966

Sun, 26 Feb 2023 06:36:01 +0000

In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads to account takeover because the victim receives a reset URL containing an attacker-controlled server name.

The post CVE-2020-10966 appeared first on CVE Vulnerability.

CVE-2020-10808

Sun, 26 Feb 2023 06:35:58 +0000

Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bash_logout to a .bash_logout’ substring followed by shell metacharacters.

The post CVE-2020-10808 appeared first on CVE Vulnerability.

CVE-2020-10787

Sun, 26 Feb 2023 06:35:57 +0000

An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password (aka the user password change script).

The post CVE-2020-10787 appeared first on CVE Vulnerability.

CVE-2020-10786

Sun, 26 Feb 2023 06:35:57 +0000

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.

The post CVE-2020-10786 appeared first on CVE Vulnerability.

CVE-2019-9859

Sun, 26 Feb 2023 06:35:06 +0000

Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: “escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument.” It means that if you give Username, it will have ‘Username’ as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places.

The post CVE-2019-9859 appeared first on CVE Vulnerability.

CVE-2019-9841

Sun, 26 Feb 2023 06:35:06 +0000

Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.

The post CVE-2019-9841 appeared first on CVE Vulnerability.

CVE-2019-12791

Sun, 26 Feb 2023 06:30:01 +0000

A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form.

The post CVE-2019-12791 appeared first on CVE Vulnerability.