EDB-37369

functional

Vesta Control Panel 0.9.8 - OS Command Injection

view exploit source exploit_dbverifiedtype webappsauthor High-Tech Bridge SApublished 2015-06-24catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-4117UShigh8.8Exploit
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan