Syscp Team

Syscp

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2007-0849

Exploit
  • EPSS 0.12%
  • Veröffentlicht 08.02.2007 18:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which allows local users to gain privileges by placing shell metacharacters in a directory name, and then using the control panel to protec...

7.5

CVE-2007-0850

Exploit
  • EPSS 0.9%
  • Veröffentlicht 08.02.2007 18:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

scripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts that are referenced by the panel_cronscript table in the SysCP database, which allows attackers with database write privileges to execute arbitrary code by...

7.5

CVE-2005-2567

  • EPSS 0.72%
  • Veröffentlicht 16.08.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via the language parameter.

7.5

CVE-2005-2568

  • EPSS 0.72%
  • Veröffentlicht 16.08.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via a string containing the code within "{" and "}" (curly bracket) characters, which are processed by the PHP eval...