Vestacp Vesta Control Panel vulnerabilities

CVE-2021-46850 [HIGH] CWE-88 CVE-2021-46850: myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to c myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint.

CVE-2020-10808 [HIGH] CWE-78 CVE-2020-10808: Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Back Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bash_logout to a .bash_logout' substring followed by shell metacharacters.

CVE-2021-28379 [HIGH] CWE-434 CVE-2021-28379: web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta throu web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.

CVE-2020-10786 [HIGH] CWE-863 CVE-2020-10786: A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.

CVE-2019-9859 [HIGH] CWE-78 CVE-2019-9859: Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execu Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if

CVE-2020-10787 [HIGH] CVE-2020-10787: An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root sy An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password (aka the user password change script).

CVE-2018-1000884 [CRITICAL] CWE-203 CVE-2018-1000884: Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0. Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code -- web/reset/index.php, line 51 that can result in Possible to determine password reset codes, attacker is able to change administra

CVE-2021-43693 [CRITICAL] CVE-2021-43693: vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php. vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php.

CVE-2021-30462 [HIGH] CWE-306 CVE-2021-30462: VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo confi VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts.

CVE-2015-2861 [MEDIUM] CWE-352 CVE-2015-2861: Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.

CVE-2022-36304 [MEDIUM] CWE-79 CVE-2022-36304: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php.

CVE-2022-34025 [MEDIUM] CWE-79 CVE-2022-34025: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post fun Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php.

CVE-2022-36305 [MEDIUM] CWE-79 CVE-2022-36305: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body fun Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandler.php.

CVE-2022-36303 [MEDIUM] CWE-79 CVE-2022-36303: Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_f Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php.