PT-2019-12946 · Vesta · Vesta Control Panel

Cyrus-And

·

CVE-2019-12792

·

Publicado

2019-08-15

·

Atualizado

2020-08-24

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Vesta Control Panel version 0.9.8-24
Description A command injection issue in the UploadHandler.php file allows remote attackers to escalate privileges from regular registered users to root.
Recommendations For Vesta Control Panel version 0.9.8-24, consider restricting access to the UploadHandler.php file until a patch is available.

Exploit

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-12792

Produtos afetados

Vesta Control Panel