exploit/linux/http/vestacp_exec

weaponized

Vesta Control Panel Authenticated Remote Code Execution

view exploit source metasploittype exploitpublished 2020-03-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10808US	high8.8	77.5% (100th)	Exploit	2020-03-22
Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on t…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.