CVE-2024-53376

HIGH

CyberPanel < 2.3.8 - Authenticated OS Command Injection via phpSelection Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-53376. PoCs published by ThottySploity.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-53376, an authenticated OS command injection vulnerability in CyberPanel versions < 2.3.8. The exploit leverages the /websites/submitWebsiteCreation endpoint to execute arbitrary commands via the phpSelection parameter.

Description

CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI.

Exploits (1)

nomisec WORKING POC 5 stars
by ThottySploity · poc
https://github.com/ThottySploity/CVE-2024-53376

This repository contains a functional exploit for CVE-2024-53376, an authenticated OS command injection vulnerability in CyberPanel versions < 2.3.8. The exploit leverages the /websites/submitWebsiteCreation endpoint to execute arbitrary commands via the phpSelection parameter.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: CyberPanel < 2.3.8
Auth required
Prerequisites: Valid CyberPanel credentials · Network access to the target · Self-signed certificate acceptance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.1076
EPSS Percentile 95.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (1)
cyberpanel/cyberpanel < 2.3.8
Published Dec 16, 2024
Tracked Since Feb 18, 2026