CVE-2024-53376

Published Dec 16, 2024

Last updated 10 months ago

Overview

Description
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI.
Source
cve@mitre.org
NVD status
Analyzed
Products
cyberpanel

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-78

Social media

Hype score
Not currently trending
  1. CyberPanel の CVE-2024-53376 が FIX:PoC が実証する完全なサーバ侵害 https://t.co/IgExVKGqEL CyberPanel の CVE-2024-53376 ですが、アップデート・バージョンのリリースと同時に、PoC が登場したようです。このところ、CyberPanel に関連する脆弱性情報が多いように思えます。 #CyberPanel… https://t.co/vF3bHAr0YC

    @iototsecnews

    26 Dec 2024

    150 Impressions

    1 Retweet

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-53376 (CVSS:8.8, HIGH) is Awaiting Analysis. CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ..https://t.co/tnva8I0VAD #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    21 Dec 2024

    4 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2024-53376 alert 🚨 CyberPanel : RCE CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI. #CyberSecurity #InfoSec #CyberPanel https://t.co/EgXY5

    @Patrowl_io

    19 Dec 2024

    49 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🚨🚨CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published ⚠A critical vulnerability (CVE-2024-53376) in CyberPanel, a popular web hosting control panel, that could allow attackers to completely compromise servers. Versions of CyberPanel prior to 2.3.8…

    @zoomeye_team

    19 Dec 2024

    626 Impressions

    2 Retweets

    5 Likes

    2 Bookmarks

    1 Reply

    0 Quotes

  5. #Vulnerability #CVE202453376 CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published https://t.co/ncNVST8PKN

    @Komodosec

    18 Dec 2024

    4 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. ⚠️⚠️ CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published 🔥PoC: https://t.co/tKylUsy6Z6 🎯330k+ Results are found on the https://t.co/pb16tGYaKe nearly year. 🔗FOFA Link:https://t.co/Gc0CysHZW5 FOFA Query:app="CyberPanel" 🔖Refer:… https://t.co/

    @fofabot

    18 Dec 2024

    1082 Impressions

    2 Retweets

    9 Likes

    4 Bookmarks

    0 Replies

    0 Quotes

  7. 🚨Alert🚨CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise. It affects versions before 2.3.8. 🔥PoC: https://t.co/zI4wYAYyQw 📊 870k+ Services are found on the https://t.co/ysWb28BTvF yearly. 🔗Hunter Link: https://t.co/VZDsWOXf6k 👇Query… https://t.co/dAqiaTeGF

    @HunterMapping

    18 Dec 2024

    2430 Impressions

    8 Retweets

    27 Likes

    11 Bookmarks

    0 Replies

    0 Quotes

  8. CVE-2024-53376 CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions < 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is requ... https://t.co/3gCpfsWcPz

    @VulmonFeeds

    15 Dec 2024

    69 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Configurations