Show filters
23 Total Results
Displaying 21-23 of 23
Sort by:
Attacker Value
Unknown
CVE-2018-10686
Disclosure Date: May 06, 2018 (last updated November 08, 2023)
An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST['path'] to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a file_put_contents call in web/upload/UploadHandler.php.
0
Attacker Value
Unknown
CVE-2015-4117
Disclosure Date: February 28, 2018 (last updated November 26, 2024)
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
0
Attacker Value
Unknown
CVE-2015-2861
Disclosure Date: June 18, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.
0
