CVE-2013-2097

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Zpanel - Remote Code Execution (Metasploit)2015-10-21 · remote · php · Verified
• ZPanel - 'templateparser.class.php' Crafted Template Remote Command Execution2013-04-16 · webapps · php

Impact

ZPanel through 10.1.0 has Remote Command Execution

Affected products

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/134030/Zpanel-10.1.0-Remote-Unauthenticated-Code-Execution.html
• http://www.exploit-db.com/exploits/25519
• http://www.openwall.com/lists/oss-security/2013/05/16/12
• http://www.openwall.com/lists/oss-security/2013/05/16/16
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84364
• http://packetstormsecurity.com/files/134030/Zpanel-10.1.0-Remote-Unauthenticated-Code-Execution.html
• http://www.exploit-db.com/exploits/25519
• http://www.openwall.com/lists/oss-security/2013/05/16/12
• http://www.openwall.com/lists/oss-security/2013/05/16/16
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84364