Skip to content
OpenAdvisories

Vendor

ZPanel Project

2 known vulnerabilities.

Products

ZPanel 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2013-10052 Public exploit

    ZPanel zsudo Local Privilege Escalation

    ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/sudoers, zsudo can be invoked by low-privileged users to execute arbitrary commands as root. This flaw…

    ZPanel Project ZPanel
  • High 8.7
    CVE-2013-10053 Public exploit

    ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution

    A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system() call that invokes the system’s htpasswd binary. By injecting shell met…

    ZPanel Project ZPanel