TI-2022-03636 CVE-2022-3967 · GHSA-4r6q-vm97-xq39
Vesta Control Panel sed main.sh argument injection
Priority LOW 34
A vulnerability, which was classified as critical, was found in Vesta Control Panel.
Vulnerabilities
10 records
TI-2021-21532 CVE-2021-46850 · GHSA-ffhx-6p84-463h
myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are…
Priority MEDIUM 43
myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection.
TI-2021-10867 CVE-2021-30463 · GHSA-58p9-fwrr-259c
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to…
Priority LOW 35
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions.
TI-2020-08843 CVE-2020-10966 · GHSA-qwg2-rf9c-v87f
In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control…
Priority LOW 33
In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads to account takeover because the victim receives a reset URL containing an attacke…
TI-2019-09577 CVE-2019-12792 · GHSA-m5c2-xqg6-3892
A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24…
Priority MEDIUM 46
A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root.
TI-2019-09576 CVE-2019-12791 · GHSA-87f9-785m-w8mx
A directory traversal vulnerability in the v-list-user script in Vesta Control Panel…
Priority MEDIUM 47
A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form.
TI-2019-07223 CVE-2019-9841 · GHSA-fxq8-589v-pw8p
Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
Priority LOW 30
Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
TI-2018-13114 CVE-2018-18547 · GHSA-gjf8-m4g2-9q3r
Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the…
Priority LOW 29
Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/directory/ dir_a parameter, or the filename to the list/directo…
TI-2018-07556 CVE-2018-10686 · GHSA-r2c4-6qfq-6ppm
An issue was discovered in Vesta Control Panel 0.9.8-20.
Priority LOW 30
An issue was discovered in Vesta Control Panel 0.9.8-20.
TI-2015-03458 CVE-2015-4117 · GHSA-j57q-g4gq-57r2
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute…
Priority MEDIUM 51
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.