CVE-2015-4117 Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
HighCVSS 8.8
EPSS 10.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vestacp control panel | < 0.9.8-14 | 0.9.8-14 |
References
- vestacp.com vendor-advisory
- 37369 exploit third-party-advisory vdb-entry
- www.htbridge.com third-party-advisory