CVE-2013-10053

EIP tracks 1 public exploit for CVE-2013-10053. PoCs published by shachibista, sinn3r, including Metasploit module exploits/unix/webapp/zpanel_username_exec.

AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in ZPanel's htpasswd module, allowing authenticated users to execute arbitrary system commands via the username field. The exploit leverages CSRF token handling and session management to authenticate and inject the payload.

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system() call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an authenticated attacker can execute arbitrary system commands. Exploitation requires a valid ZPanel account—such as one in the default Users, Resellers, or Administrators groups—but no elevated privileges.