CVE-2021-47949
HIGHCyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47949. PoCs published by numan türle.
AI-analyzed exploit summary This exploit demonstrates an authenticated RCE vulnerability in CyberPanel <=2.1 by leveraging a symlink attack and command injection via the filemanager/controller endpoint. It also includes a reverse shell payload and token theft via MySQL queries.
Description
CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to /filemanager/controller to create symbolic links, read sensitive files like database credentials, and execute arbitrary shell commands through the /websites/fetchFolderDetails endpoint.
Exploits (1)
This exploit demonstrates an authenticated RCE vulnerability in CyberPanel <=2.1 by leveraging a symlink attack and command injection via the filemanager/controller endpoint. It also includes a reverse shell payload and token theft via MySQL queries.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H