CVE-2015-4117

Опубликовано: 28 фев. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.

Ссылки

http://vestacp.com/roadmap/#history
Vendor Advisory
https://www.exploit-db.com/exploits/37369/
Third Party Advisory
VDB Entry
https://www.htbridge.com/advisory/HTB23261
Third Party Advisory
http://vestacp.com/roadmap/#history
Vendor Advisory
https://www.exploit-db.com/exploits/37369/
Third Party Advisory
VDB Entry
https://www.htbridge.com/advisory/HTB23261
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vestacp:control_panel:*:*:*:*:*:*:*:*

Версия до 0.9.8-14 (исключая)

EPSS

Процентиль: 92%

0.07499

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-j57q-g4gq-57r2