- Description
- CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- cyberpanel
CVSS 3.1
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-862
- Hype score
- Not currently trending
#exploit 1. CVE-2024-54679: Cyber Panel DoS https://t.co/GHmXsKcIWb 2. CVE-2024-39090: CSRF to Stored XSS in PHP Gurukul Online Shopping Portal v2.0 https://t.co/fcjV63Nlk0 3. CVE-2023-23586: Linux vDSO and VVAR https://t.co/cSoVPFnrDZ
@VIPER92929
24 Dec 2024
3 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#exploit 1. CVE-2024-54679: Cyber Panel DoS https://t.co/Z02Yo94Kf0 2. CVE-2024-39090: CSRF to Stored XSS in PHP Gurukul Online Shopping Portal v2.0 https://t.co/aJpMwa9INt 3. CVE-2023-23586: Linux vDSO and VVAR https://t.co/5gcQOiRNpK
@ksg93rd
22 Dec 2024
141 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
[+] Little Achievement Update! I've discovered a new security vulnerability, CVE-2024-54679, in CyberPanel (aka Cyber Panel), a widely-used web hosting control panel powered by OpenLiteSpeed. CVE Identifier: CVE-2024-54679 Advisory: https://t.co/vt1FcEwxlS
@hotplugin0x01
6 Dec 2024
767 Impressions
2 Retweets
9 Likes
2 Bookmarks
1 Reply
0 Quotes
CVE-2024-54679 CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. https://t.co/9Eh3zE3TVS
@CVEnew
5 Dec 2024
307 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cyberpanel:cyberpanel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9B6CD8AB-3C5A-47E2-8D68-182D8D57B964",
"versionEndIncluding": "2.3.7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]