Vulnerability Database

299,749

Total vulnerabilities in the database

CVE-2019-12792

A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root.

  • Published: Aug 15, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-12792
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
vestacp / control_panel 0.9.8-24 0.9.8-24.x