Vesta Control Panel - Forum

sandy wrote: Sun Apr 08, 2018 11:03 am

AKr0nizz wrote: Sun Apr 08, 2018 10:58 am

MAN5 wrote: Sun Apr 08, 2018 10:51 am

Hi, we should be patience with Vesta team, even we got calls from our frustrated clients.
The affected servers are running with vesta > doesnt meant vesta had this bug. Let them to find the issue 1st.

More likely its problem with RoundCube. 23 hours ago critical exploit for it was published. I realize that VastaCP is the awesome product as for freeware.

@sandy
Even WordPress has more security breaches, if we compare it to Vesta.

You can find bugs and exploits in every software btw. Just bugs in Control Panels are more critical in comparison to MS Word for example.

only if you use vulnerable plugins/theme under wp and vesta doesn't use plugins/module though

More likely its problem with RoundCube. 23 hours ago critical exploit for it was published

lukapaunovic wrote: Sun Apr 08, 2018 11:14 am https://cve.mitre.org/cgi-bin/cvename.c ... -2018-9846

imperio wrote: Sun Apr 08, 2018 11:11 am

More likely its problem with RoundCube. 23 hours ago critical exploit for it was published

Please, write more about that

AKr0nizz wrote: Sun Apr 08, 2018 11:19 am

imperio wrote: Sun Apr 08, 2018 11:11 am

More likely its problem with RoundCube. 23 hours ago critical exploit for it was published

Please, write more about that

https://github.com/roundcube/roundcubemail/issues/6238

sandy wrote: Sun Apr 08, 2018 11:21 am

AKr0nizz wrote: Sun Apr 08, 2018 11:19 am

imperio wrote: Sun Apr 08, 2018 11:11 am
Please, write more about that

https://github.com/roundcube/roundcubemail/issues/6238

exploit resulting :
(will return a File not Found template, nonetheless code'll be executed).
again not related with current ddos hack