high7.2
CVE-2020-14421
aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.
Impact
aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aapanel | Aapanel | through 6.6.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159575/aaPanel-6.6.6-Privilege-Escalation.html
- https://forum.aapanel.com
- https://github.com/jenaye/aapanel
- http://packetstormsecurity.com/files/159575/aaPanel-6.6.6-Privilege-Escalation.html
- https://forum.aapanel.com
- https://github.com/jenaye/aapanel