Zpanel Project Zpanel vulnerabilities

CVE-2013-10053 [HIGH] CWE-78 CVE-2013-10053: A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. W A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system() call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an authenticated attacker can execute arbitrary system com

CVE-2013-2097 [HIGH] CVE-2013-2097: ZPanel through 10.1.0 has Remote Command Execution ZPanel through 10.1.0 has Remote Command Execution

CVE-2013-10052 [HIGH] CWE-269 CVE-2013-10052: ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for a ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/sudoers, zsudo can be invoked by low-privileged users to execute arbitrary commands as root. This flaw enables local attackers with shell access to escalate privileges by writing a payload to a wr