SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  CyberPanel completePath Remote Command Execution

Category: WEB-ATTACKS      

CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters.


Relevant Information