CyberSec.Space Logo
Back to CVE Browser

CVE-2024-53376

HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-12-16
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI.

Affected Platforms (CPE)

📦
Cyberpanel

Cyberpanel

< 2.3.8

References & Advisories

🔗 https://github.com/ThottySploity/CVE-2024-53376
🔗 https://github.com/ThottySploity/CVE-2024-53376/blob/aa306187323bd1127d56803cb34cac8820b61484/cyberpanel.py#L70
🔗 https://thottysploity.github.io/posts/cve-2024-53376
🔗 https://github.com/ThottySploity/CVE-2024-53376

Related Vulnerabilities

CVE-2021-479498.7

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute ...

CVE-2026-414739.1

CyberPanel versions prior to 2.4.4 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allo...

CVE-2026-414726.1

CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST ...

CVE-2024-561126.1

CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php.