Approved changes feed: RSS · Atom

cpe:2.3:a:mgt-commerce:cloudpanel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMgt Commerce (8b9002dc-d1f0-5b2e-9a4d-64df575ca419)
ProductCloudpanel (98c09f1e-cb22-56e8-8b3e-6cc63ae20396)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24320 vulnerable 2026-06-08 06:29:41.242386 Details available
Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the service parameter of the load-logfiles function.
Published: 2024-06-14T00:00:00.000Z
Updated: 2024-08-21T13:54:40.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46157 vulnerable 2026-06-08 06:12:44.285118 Details available
File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing file permissions to 4755.
Published: 2023-12-08T00:00:00.000Z
Updated: 2024-11-26T19:02:03.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36630 vulnerable 2026-06-08 06:08:12.764191 Details available
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
Published: 2023-06-25T00:00:00.000Z
Updated: 2024-11-27T19:47:23.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35885 vulnerable 2026-06-08 06:06:28.050931 Details available
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
Published: 2023-06-20T00:00:00.000Z
Updated: 2024-12-09T19:01:40.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33747 vulnerable 2026-06-08 06:06:23.407837 Details available
CloudPanel v2.2.2 allows attackers to execute a path traversal.
Published: 2023-06-06T00:00:00.000Z
Updated: 2025-01-08T15:26:47.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0391 vulnerable 2026-06-08 05:52:04.868978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.