Vulnerabilities > Vestacp > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-15 | CVE-2019-12791 | Path Traversal vulnerability in Vestacp Control Panel 0.9.824 A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form. | 8.8 |
| 2018-02-28 | CVE-2015-4117 | OS Command Injection vulnerability in Vestacp Control Panel Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php. | 8.8 |