Mgt-Commerce

6 CVEs across 1 Mgt-Commerce products. Browse Mgt-Commerce vulnerabilities, severities, and proof-of-concept exploits.

Mgt-Commerce products with known CVEs

ProductCVEs
Cloudpanel6
Mgt-Commerce CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-24320High8.82024-06-14Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrar…
CVE-2023-46157High8.82023-12-08File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing fil…
CVE-2023-36630High8.82023-06-25In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
CVE-2023-35885Critical9.82023-06-20CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
CVE-2023-33747High7.82023-06-06CloudPanel v2.2.2 allows attackers to execute a path traversal.
CVE-2023-0391High8.12023-03-21MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of Clou…