TI-2023-17956 CVE-2023-35885 · GHSA-wmrx-g8f2-rgwh
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
Priority CRITICAL 87
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
MGT-COMMERCE
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
MGT-COMMERCE records in CISA KEVNo MGT-COMMERCE vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2023-18448 CVE-2023-36630 · GHSA-r8qq-53mg-qp7w
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
Priority HIGH 73
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
TI-2023-00373 CVE-2023-0391 · GHSA-4gcf-523q-9gmp
MGT-COMMERCE CloudPanel Shared Certificate
Priority HIGH 70
MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel.
TI-2023-16668 CVE-2023-33747 · GHSA-v269-xm2p-cp2h
CloudPanel v2.2.2 allows attackers to execute a path traversal.
Priority HIGH 69
CloudPanel v2.2.2 allows attackers to execute a path traversal.
TI-2024-16079 CVE-2024-24320 · GHSA-82h5-9gw3-q456
Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows…
Priority MEDIUM 47
Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the service parameter of the load-logfiles functio…
TI-2023-24797 CVE-2023-46157 · GHSA-3g99-8x6v-6hch
File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to…
Priority MEDIUM 45
File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing file permissions to 4755.