Vulnerabilities > Vestacp > Control Panel > High

DATE CVE VULNERABILITY TITLE RISK
2022-11-13 CVE-2022-3967 Improper Enforcement of Message or Data Structure vulnerability in Vestacp Control Panel
A vulnerability, which was classified as critical, was found in Vesta Control Panel.
local
low complexity
vestacp CWE-707
7.8
2022-10-24 CVE-2021-46850 Argument Injection or Modification vulnerability in Vestacp Control Panel and Vesta Control Panel
myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection.
network
low complexity
vestacp CWE-88
7.2
2021-04-08 CVE-2021-30463 Link Following vulnerability in Vestacp Control Panel
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions.
local
low complexity
vestacp CWE-59
7.8
2019-08-15 CVE-2019-12792 OS Command Injection vulnerability in Vestacp Control Panel 0.9.824
A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root.
network
low complexity
vestacp CWE-78
8.8
2019-08-15 CVE-2019-12791 Path Traversal vulnerability in Vestacp Control Panel 0.9.824
A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form.
network
low complexity
vestacp CWE-22
8.8
2018-02-28 CVE-2015-4117 OS Command Injection vulnerability in Vestacp Control Panel
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
network
low complexity
vestacp CWE-78
8.8