RSS   Vulnerabilities for 'Vesta control panel'   RSS

2021-11-29
 
CVE-2021-43693

NVD-CWE-Other
 
 
vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php.

 
2021-04-08
 
CVE-2021-30462

CWE-269
 
 
VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts.

 
2021-03-15
 
CVE-2021-28379

CWE-434
 
 
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.

 
2020-04-21
 
CVE-2020-10787

CWE-269
 
 
An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password (aka the user password change script).

 
 
CVE-2020-10786

CWE-20
 
 
A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.

 
2020-03-22
 
CVE-2020-10808

CWE-78
 
 
Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bash_logout to a .bash_logout' substring followed by shell metacharacters.

 
2020-03-10
 
CVE-2019-9859

CWE-78
 
 
Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places.

 
2015-06-18
 
CVE-2015-2861

 
 
Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.

 

 >>> Vendor: Vestacp 2 Products
Control panel
Vesta control panel

Copyright 2024, cxsecurity.com

 

Back to Top