CVE-2018-18547 Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/directory/ dir_a parameter, or the filename...
MediumCVSS 6.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/directory/ dir_a parameter, or the filename to the list/directory/ URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vestacp control panel | <= 0.9.8-22 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- numanozdemir.com exploit third-party-advisory