high8.8Public exploit code
CVE-2015-4117
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/ba…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vesta Control Panel 0.9.8 - OS Command Injection2015-06-24 · webapps · php · Verified
Impact
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vestacp | Control Panel | before 0.9.8-14 |