← Back to CVE List
CVE-2015-4117
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt