CVE-2013-2097

ZPanel through 10.1.0 has Remote Command Execution

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

26.05% chance of exploitation in the next 30 days, 98th percentile

Published

2020-02-12

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/134030/Zpanel-10.1.0-Remote-Unauthenticated-Code-Exe…
• http://www.exploit-db.com/exploits/25519

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zpanel_information_di…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/38505
• https://www.exploit-db.com/exploits/25519

References

• CVE Record
• NVD entry

Related

• CVE-2013-2095
• CVE-2013-2107
• CVE-2013-2094
• CVE-2013-2108
• CVE-2013-2088
• CVE-2013-2113