CVE-2021-34257

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2)…

published March 31, 2022

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01822 · 78.6th percentile
Published
2022-03-31T15:57Z
EPSS history
Timeline
  • 31 MAR 15:57Z
    Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2)…
    cvelistv5