Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:aapanel:baota:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Command Injection in aaPanel BaoTa via File Merge Handler

An unauthenticated remote command injection vulnerability in the aaPanel BaoTa File Merge Handler allows attackers to execute arbitrary system commands via the split_file_path parameter.

exploited BaoTa web-application-vulnerability rce command-injection remote-code-execution vulnerability linux webserver aaPanel
1r 2t 1c